port 5000 open even with zonelabs!!!

[furballz]

hi, i was trying to test my comp secutrity settings and went to check it out on symantec site which gave that result! To confirm it, i've tried Port monitor and it said that my port 5000 is being used by an unknown program!! I've search around and found no mention on this problem (grc.com = stealth result) except for the fact that it is a known port for certain trojan and happened since win_me and i know that win_xp is NOT very "trustworhty" (all has been configured with auto-update!)

Some help on identifying that security risk would be nice!!

 

[n0cmonkey]

From snort.org:

Port 5000 / tcp
Keyword BackDoorSetup
Description [trojan] Back Door Setup



Port 5000 / tcp
Keyword commplex-main
Description



Port 5000 / tcp
Keyword fics
Description Free Internet Chess Server



Port 5000 / udp
Keyword commplex-main
Description



Port 5000 / tcp
Keyword jdbc-gateway


Also, check out fport here: http://www.foundstone.com/rdlabs/tools.php?category=Intrusion+Detection
Might not work if you are not using NT/2k though