port 6000 trojan

[RickMerrill]

I've see this in the wild - has anyone else?

[RickMerrill]

Regis wrote:
> RickMerrill<rick0.merrill@gmail.com.lessspam> writes:
>
>> I've see this in the wild - has anyone else?
>
> Can you say more why it's believed to be a trojan?
>
> If they're unix boxes, it may simply be an X11 server. How big a
> problem it is for that to be listening (it can be a very big deal)
> depends on the configuration.
>

http://forum.avast.com/index.php?topic=23108.0

But the first reference I found (a few days ago) seems
to have disappeared: it ID'd a certain country as the perp.


There may be legit applications that use the port, but ...

[Regis]

RickMerrill <rick0.merrill@gmail.com.lessspam> writes:

> I've see this in the wild - has anyone else?

Can you say more why it's believed to be a trojan?

If they're unix boxes, it may simply be an X11 server. How big a
problem it is for that to be listening (it can be a very big deal)
depends on the configuration.