trojan problem

[Tony Arnold]

Brian,

Brian Walker wrote:

> nmapfe on 127.0.0.1 <http://127.0.0.1> .... any other would be of no
> value to the system integrity, surely?

This is only checking open ports on your local loop interface and not on
the outward facing interface. Try the same again using the IP address of
your ethernet device (ifconfig shoud tell you).

127.0.0.1 is only accessible from your own machine, so although having
these ports open is a little unusual, it does not open up any threat
from the outside world.


> Tony - many thanks for that ... confirmed my fears. A fresh reinstall is
> coming up. I will check the /home/brian/.  areas before importing the
> old /home. I plan to transfer to the backup disk, then clean install,
> then scan backup and clean if needed. Sound OK?

Yep, sounds good!

> Regards to all, and it is a good lesson, right?

Yes, indeed!

Regards,
Tony.
-- 
Tony Arnold, IT Security Coordinator, University of Manchester,
IT Services Division, Kilburn Building, Oxford Road, Manchester M13 9PL.
T: +44 (0)161 275 6093, F: +44 (0)870 136 1004, M: +44 (0)773 330 0039
E: tony.arnold at manchester.ac.uk, H: http://www.man.ac.uk/Tony.Arnold