i got a friend i port scan her pc and i found out the she had port 21 open. i knew that usually port 21 is used by trojans/ftp server of the likes. i asked her if she opened any suspecious files from chatter..she said no..(basing on her answers, i was wandering)

i was wandering what are the instances that windows xp opens port 21 except of course using trojans..

if this is opened by windows system?

tried connection with it using ftp on that port..it say

connection to remotes host close.

if this is trojan based, then il figure it out on my own (dont wana bother you guys with trojans and stuff) .heheheheheh..i was just wandering if win xp can open port 21 without user intervention.

any help/info/article to read will help.

thanks

some scanners sometimes have dodgy results, use another one to confirm the port is actually open, try telneting to the port from the command prompt and see if you get any encrpted feedback.

or use fport / active ports so see which application is listening on port 21 to incoming connections ... i think this will help you

Or just make it really simple and open a cmd and ftp to her ip/21 and see
what the banner is?

Skyline pls try to read the post and then answer okay?

you will generally find that port 21 is open on most port scans, 90% of the time it is nothing to worry about as its just open as a standard with windows for some reason. Theres no need to worry about trojans as they dont often user port 21 as its too obvious.
To sum it up i wouldnt worry at all, most port scans that i conduct show port 21 as open

Hope this helped

[{{{{eQ}}}]

Windows Xp proffessional do not open 21 by default .
use fport and get app listenng on that or just try to connect with netcat and see if u get sme banner or anything .

is there a trojan that uses port 21 ?? i dont think so

Most of trojans have option tio set custom port

but you must be stupid to set port to 21 didnt u ?

their are trojans on port 21. for the record (googled them)

port 21 - Blade Runner, Doly Trojan, Fore, FTP trojan, Invisible FTP, Larva, WebEx, WinCrash

i think thats plenty already..

thanks for your advices.

U cant even imagine dude how fool lamers can be

I seem to remember the ZoneAlarm firewall being known to report port 21 as open when it isnt when doing a port scan. A web browser could also possibly open it for an ftp session to listen.

These trojans are known for this port and there are most likely more: Back Construction, Blade Runner, Cattivik FTP Server, CC Invader, Dark FTP, Doly Trojan, Fore, FreddyK, Invisible FTP, Juggernaut 42, Larva, MotIv FTP, Net Administrator, Ramen, RTB 666, Senna Spy FTP server, The Flu, Traitor 21, WebEx, WinCrash.

thanks. i think that about it. i have zonealarm too..

about trojans on port 21..well what can i say..some people do make things obvious..hehehehhehehehehe..maybe to let known to the world they can open the famous port 21. hehehehehe