email ports

[Guest]

Archived from groups: microsoft.public.windowsnt.protocol.tcpip (More info?)

Is there an easy way to determine if a virus/worm is sending email that I am
not aware of? In particular, are there specific ports to look for?

I am using XP Pro and Outlook Express. I get many notifications that I have
sent email, but if my system did, I am sure not aware of it. I assume it is
not actually my system, but I want to ensure it is not. I use AVG anti-virus
software, which I hope is enough.

I have installed PortReporter and it has ben running for more than a couple
of weeks. Can I use it's data for this?

I assume this question has been answered before, so probably I only need a
hint for where to look for an answer.

 

[Guest]

Archived from groups: microsoft.public.windowsnt.protocol.tcpip (More info?)

In article <#GxG9uHOEHA.3596@tk2msftngp13.phx.gbl>,
Sam Hobbs <samuel@social.rr.com_change_social_to_socal> wrote:
>Is there an easy way to determine if a virus/worm is sending email that I am
>not aware of? In particular, are there specific ports to look for?

The standard SMTP port is port 25.

--
-- Rod --
rodd(at)polylogics(dot)com

 

[Guest]

Archived from groups: microsoft.public.windowsnt.protocol.tcpip (More info?)

"Rod Dorman" <rodd@panix.com> wrote in message
news:c80dib$j1u$1@reader2.panix.com...
>
> The standard SMTP port is port 25.

Thank you. I will look for port 25.

I looked at the PortReporter log files and saw that the two programs I use
(Outlook Express and Magic) for email use port 110. I get SMTP and POP3
confused, but now I see that SMTP is used to send and POP3 is used to
receive, right? So I don't need to look at 110, just 25. I think that helps
me enough that I can figure out myself anything else I need to know.

I have not found a utility for importing the PortReporter log files into
Access or anywhere else, but I might write a program to scan the
PortReporter ports log file. That file is a CSV format file, except it has a
few lines of header data and it (like the other two log file types) is
written out in many individual files. Hopefully, though, that will provide a
fool-proof way to determine if email is being sent by any software other
than Outlook Express or Magic.