Welcome to Tech Support Forum home to more then 136,000 problems solved. Issues have included: Spyware, Malware, Virus Issues, Windows, Microsoft, Linux, Networking, Security, Hardware, and Gaming Getting your problem solved is as easy as:
1. Registering for a free account
2. Asking your question
3. Receiving an answer

Registered members:
* Get free support
* Communicate privately with other members (PM).
* Removal of this message
* See fewer ads.
* And much more..

 





Want to know how to post a question? click here Having problems with spyware and pop-ups? First Steps
Go Back   Tech Support Forum > Security Center > HijackThis Log Help
User Name
Password
Site Map Register Donate Rules Blogs Mark Forums Read

HijackThis Log Help Get Rid Of Malware With Help From Our Analysts. Follow the "First Steps" link at the top right of each page before posting for help.

Reply
 
Thread Tools
Old 01-30-2005, 11:21 AM   #1 (permalink)
Registered User
 
Join Date: Oct 2004
Posts: 14
OS: Windows XP Pro


IPCScan Ports?

Hi,

I downloaded IPCScan just to see what it did, and when I d/led it, Norton gave me an antivirus warning, but I ignored it because I assumed it just says that so you know when remote users load it onto your computer or something.

Anyways, I decided I'd rather not keep the program, so I deleted it. However, when I do a "netstat -a" in the command prompt, it gives me this:

Active Connections

Proto Local Address Foreign Address State
TCP rkohli:59 rkohli:0 LISTENING
TCP rkohli:epmap rkohli:0 LISTENING
TCP rkohli:microsoft-ds rkohli:0 LISTENING
TCP rkohli:1029 rkohli:0 LISTENING
TCP rkohli:1031 rkohli:0 LISTENING
TCP rkohli:5180 rkohli:0 LISTENING
TCP rkohli:netbios-ssn rkohli:0 LISTENING
TCP rkohli:1087 65.57.234.3:6667 ESTABLISHED
TCP rkohli:1138 205.188.9.120:5190 ESTABLISHED
TCP rkohli:1151 oam-m07c.blue.aol.com:5190 ESTABLISHED
TCP rkohli:1195 82.138.241.152:6666 ESTABLISHED
TCP rkohli:1198 ircu.bredband.com:6666 ESTABLISHED
TCP rkohli:1204 afxs-d01a.blue.aol.com:5190 ESTABLISHED
UDP rkohli:microsoft-ds *:*
UDP rkohli:isakmp *:*
UDP rkohli:1032 *:*
UDP rkohli:1164 *:*
UDP rkohli:4500 *:*
UDP rkohli:ntp *:*
UDP rkohli:1140 *:*
UDP rkohli:ntp *:*
UDP rkohli:netbios-ns *:*
UDP rkohli:netbios-dgm *:*

This seems like WAY too many ports to be open (the 6666 and 6667 are IRC, and the 5190 is AIM).

I deleted the program, but how do I clear up all these ports n stuff?

Thanks very much!

Rohan
rkohli is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Reply With Quote
Old 01-30-2005, 11:27 AM   #2 (permalink)
Analyst, Security Team
 
greyknight17's Avatar
 
Join Date: Jul 2004
Location: New York
Posts: 14,327
OS: Windows 98 & Windows XP Home/Pro

My System

See if this site will help you out more.
__________________
Please do NOT PM me. Post whatever questions you may have in the forum and we will take a look at it when we get to it. If you have waited for more than 3 days, you may then and ONLY then PM me for assistance. I will take a look at it.

greyknight17 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Reply With Quote
Old 01-30-2005, 11:35 AM   #3 (permalink)
Registered User
 
Join Date: Oct 2004
Posts: 14
OS: Windows XP Pro


Hmm,

Thanks for the link, but the problem is that I don't understand what the ports are being used for, so I don't know what to close and what to keep open. Even then, I'm not too good w/all this stuff, though I'm sure I could figure it out if i read that page enough. Anyways...I'm completely at a loss as to what to do.

Thanks,

Rohan
rkohli is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Reply With Quote
Reply


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT -7. The time now is 09:21 AM.



Copyright 2001 - 2008, Tech Support Forum

Search Engine Friendly URLs by vBSEO

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82