Does my system have a worm?

[Jim Byrnes]

NoOp wrote:
> On 07/28/2010 12:05 PM, Jim Byrnes wrote:
>> I have Apache2 installed using localhost on my desktop and have been
>> trying to figure out how to configure it so I can access it from other
>> machines on my network.  As part of this I used the Network Tools to run
>> a port scan.  I recognize all the open ports except port = 2002, state =
>> open, service = unknown.
>>
>> I googled port 2002 and the first hit was
>> http://www.f-secure.com/v-descs/worm_linux_slapper.shtml. I don't have
>> any process running called .bugtraq or any of the files them mention, so
>> I guess I'm ok, but how do I find out what has port 2002 open?
>>
>> Thanks,  Jim
>>
>
> Try:
>
> $ sudo netstat -ap>  netinfo
> $ gedit netinfo
>

The results:

Proto Recv-Q Send-Q Local Address           Foreign Address 
State       PID/Program name
tcp        0      0 *:www                   *:*

                     LISTEN      4066/apache2
tcp        0      0 localhost:2002          *:* 
LISTEN      1152/soffice.bin

tcp        0      0 localhost:ipp           *:*
                      LISTEN      1317/cupsd

tcp        0      0 localhost:mysql         *:* 
LISTEN      892/mysqld

That didn't wrap well but it looks like it is OpenOffice.

Thanks,  Jim