Results 1 to 4 of 4

Thread: I want your thoughs/info

  1. March 9th, 2003, 07:34 AM #1
    |The|Specialist
    |The|Specialist is offline
    Banned
    Join Date
    Jul 2002
    Posts
    877

    I want your thoughs/info

    Ok AOers.... check it. I was doing some cleaning in my laptop when I noticed that some weird ports where open. Port 9273 is open but I don't know WTF this could be... I only noticed this open port #9273 today. Its still a bit of a new PC and I don't have good FW for it. I don't seem to see any funny connections its just these dang open ports that are listen to commands that could possably tell it to attack... attack... attack.... I checked my proccesses and I didn't see anything weird there and my AV says everything is alright. Well like I said... this PC is still a bit new compaired to my other PCs. Im just trying to take good care of it and findout whats up.
    Reply With Quote Reply With Quote
  2. March 9th, 2003, 07:56 AM #2
    11001001
    11001001 is offline
    All the Certs! 11001001's Avatar
    Join Date
    Mar 2002
    Location
    Just West of Beantown, though nobody from Beantown actually calls it "Beantown."
    Posts
    1,230
    Google'd it.

    Telnet port = 9273
    http://www.gainesville2600.org/stuff...t_analysis.htm
    Above ground, vertical, and exchanging gasses.
    Now you see me | Now you don't
    "Relax, Bender; It was just a dream. There's no such thing as two." ~ Fry
    sometimes my computer goes down on me
    Reply With Quote Reply With Quote
  3. March 9th, 2003, 08:27 AM #3
    Stormcr0w
    Stormcr0w is offline
    Junior Member
    Join Date
    Feb 2003
    Posts
    18
    After doing a quick search on Google, I found the following page which mentions Port 9273:

    Analysis of a WinNT "rootkit"

    I believe that the following article also point to the same rootkit:

    Re: Some details in a recent NT hack we encountered

    This led me to more searching where I cam across the following line on many sites that provide information on ports ( such as The giant port list):


    TCP 9273 BackGate (Windows rootkit)

    So it would seem that some one has managed to install a rootkit on your machine.
    Reply With Quote Reply With Quote
  4. March 9th, 2003, 12:36 PM #4
    Und3ertak3r
    Und3ertak3r is offline
    The Doctor Und3ertak3r's Avatar
    Join Date
    Apr 2002
    Posts
    2,744
    isn't Port 5000 to do with upnp ?
    dunno about port 9273.. Im listening and learning here..

    Cheers
    "Consumer technology now exceeds the average persons ability to comprehend how to use it..give up hope of them being able to understand how it works." - Me http://www.cybercrypt.co.nr
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules