which of the following?

The below report indicates that the system is MOST likely infected by which of the following?
Protocol LOCAL IP FOREIGN IP STATE
TCP 0.0.0:445 0.0.0.0:0 Listening
TCP 0.0.0.0:3390 0.0.0.0:0 Listening

The below report indicates that the system is MOST likely infected by which of the following?
Protocol LOCAL IP FOREIGN IP STATE
TCP 0.0.0:445 0.0.0.0:0 Listening
TCP 0.0.0.0:3390 0.0.0.0:0 Listening

A.
Trojan

B.
Worm

C.
Logic bomb

D.
Spyware



Leave a Reply to rsm Cancel reply2

Your email address will not be published. Required fields are marked *

20 − 12 =


rsm

rsm

This could be a Trojan on port 3390 or a worm on port 445 (Conficker worm)? But I suppose Trojan is the “MOST likely” answer because it is listening for command and control.

Paul

Paul

Agreed with Trojan 3390