论坛: 菜鸟乐园 标题: svchost和300*端口 复制本贴地址    
作者: tomb [ycl011]    论坛用户   登录
我用NETSTAT -A 命令 
TCP    server:epmap           server:0               LISTENING
TCP    server:microsoft-ds    server:0               LISTENING
TCP    server:1025            server:0               LISTENING
TCP    server:1027            server:0               LISTENING
TCP    server:3200            server:0               LISTENING
TCP    server:3372            server:0               LISTENING
TCP    server:netbios-ssn     server:0               LISTENING
TCP    server:netbios-ssn     server:0               LISTENING
TCP    server:3002            server:0               LISTENING
TCP    server:3003            server:0               LISTENING
TCP    server:3004            server:0               LISTENING
TCP    server:netbios-ssn     server:0               LISTENING
TCP    server:3200            202.101.42.108:http    ESTABLISHED
UDP    server:microsoft-ds    *:*
UDP    server:3001            *:*
UDP    server:3175            *:*
UDP    server:3411            *:*
UDP    server:netbios-ns      *:*
UDP    server:netbios-dgm     *:*
UDP    server:isakmp          *:*
UDP    server:domain          *:*
UDP    server:bootps          *:*
UDP    server:bootpc          *:*
UDP    server:netbios-ns      *:*
UDP    server:netbios-dgm     *:*
UDP    server:isakmp          *:*
UDP    server:netbios-ns      *:*
UDP    server:netbios-dgm     *:*
UDP    server:isakmp          *:*
我用一个嗅探器 查了下
explorer.exe:1108 UDP server:3411 *:*
IEXPLORE.EXE:800 UDP server:3175 *:*
IEXPLORE.EXE:800 TCP server:3210 server:0 LISTENING
IEXPLORE.EXE:800 TCP server:3210 202.101.42.108:http CLOSE_WAIT
LSASS.EXE:244 UDP server:isakmp *:*
LSASS.EXE:244 UDP server:isakmp *:*
LSASS.EXE:244 UDP server:isakmp *:*
msdtc.exe:488 TCP server:1025 server:0 LISTENING
msdtc.exe:488 TCP server:3372 server:0 LISTENING
svchost.exe:428 TCP server:epmap server:0 LISTENING
svchost.exe:600 TCP server:3002 server:0 LISTENING
svchost.exe:600 TCP server:3003 server:0 LISTENING
svchost.exe:600 TCP server:3004 server:0 LISTENING
svchost.exe:600 UDP server:3001 *:*
svchost.exe:600 UDP server:domain *:*
svchost.exe:600 UDP server:bootps *:*
svchost.exe:600 UDP server:bootpc *:*
System:8 TCP server:microsoft-ds server:0 LISTENING
System:8 TCP server:1027 server:0 LISTENING
System:8 TCP server:netbios-ssn server:0 LISTENING
System:8 TCP server:netbios-ssn server:0 LISTENING
System:8 TCP server:netbios-ssn server:0 LISTENING
System:8 UDP server:microsoft-ds *:*
System:8 UDP server:netbios-ns *:*
System:8 UDP server:netbios-dgm *:*
System:8 UDP server:netbios-ns *:*
System:8 UDP server:netbios-dgm *:*
System:8 UDP server:netbios-ns *:*
System:8 UDP server:netbios-dgm *:*

svchost 是个什么东西啊 是木马么?
他开了300* 端口是要做什么

地主 发表时间: 08/11 00:18

回复: dr_power [dr_power]   论坛用户   登录
我很菜,你说的端口是什么??

B1层 发表时间: 08/11 00:23

回复: tomb [ycl011]   论坛用户   登录
谁知道啊
回复下~


B2层 发表时间: 08/11 00:39

论坛: 菜鸟乐园

20CN网络安全小组版权所有
Copyright © 2000-2010 20CN Security Group. All Rights Reserved.
论坛程序编写:NetDemon

粤ICP备05087286号