Jump to content


Ports test r


  • You cannot reply to this topic
3 replies to this topic

#1 OFFLINE   Adel

    Member

  • Members
  • PipPip
  • 38 posts

Posted 06 May 2005 - 02:05 AM

Hello,

I did this test today twice. Once in the morning after i noticed my firewall disappeared from the face of the screen & I practically failed. My computer was out in the open for the taking. I checked my system & I noticed my whole security system is there. I did system restore to no avail. So I uninstalled my security suite & reinstalled it. after the updates I went to do this test again. I did well except for this Net Bios port that is supposedly open & needs to be closed.

I would very much close this damn thing before I pull the rest of the hair I still have left over from this morning's failing grade :(

Tarun,

I started experiencing this problem after I did the fixes from the HJT. I did another HJT scan, printed the log to make sure, & I couldn't see my trend Micro program anywhere w/ the programs files.

I am not complaining, I am just relating the set of events that perhaps led to the firewall being ineffective.
Any help is appreciated.
thank you.
here is the report of my testSolicited TCP Packets: RECEIVED (FAILED) — As detailed in the port report below, one or more of your system's ports actively responded to our deliberate attempts to establish a connection. It is generally possible to increase your system's security by hiding it from the probes of potentially hostile hackers. Please see the details presented by the specific port links below, as well as the various resources on this site, and in our extremely helpful and active user community.



Unsolicited Packets: PASSED — No Internet packets of any sort were received from your system as a side-effect of our attempts to elicit some response from any of the ports listed above. Some questionable personal security systems expose their users by attempting to "counter-probe the prober", thus revealing themselves. But your system remained wisely silent. (Except for the fact that not all of its ports are completely stealthed as shown below.)



Ping Echo: PASSED — Your system ignored and refused to reply to repeated Pings (ICMP Echo Requests) from our server.

139
Net
BIOS
OPEN! As you probably know by now, the NetBIOS File Sharing port is one of the largest security holes for networked Windows machines. The payoff to Malicious hackers from finding open Windows shares is so big that many scanners have been written just to find open ports like this one. Closing this port is not difficult and it should be a priority for you!
GRC Port Authority Report created on UTC: 2005-05-06 at 01:42:42

Results from scan of ports: 0, 21-23, 25, 79, 80, 110, 113,
119, 135, 139, 143, 389, 443, 445,
1002, 1024-1030, 1720, 5000

1 Ports Open
0 Ports Closed
25 Ports Stealth
---------------------
26 Ports Tested

NO PORTS were found to be CLOSED.

The port found to be OPEN was: 139

Other than what is listed above, all ports are STEALTH.

TruStealth: FAILED - NOT all tested ports were STEALTH,
- NO unsolicited packets were received,
- NO Ping reply (ICMP Echo) was received


Sorry for the lenght of the thread.


#2 OFFLINE   Tarun

    Lunarian

  • Banned
  • PipPipPipPipPip
  • 3,071 posts

Posted 06 May 2005 - 03:07 AM

See if HijackThis made backups. If not I can make you a file to restore what may have been your firewall.

O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\Internet Security 2005\pccguide.exe"

I looked it up and it says it's anti-virus. It may be related to the firewall according to some documentation.

#3 OFFLINE   Caralin

    Member

  • Members
  • PipPip
  • 10 posts

Posted 07 May 2005 - 11:16 PM

you can use this program to close the netbios ports :)
http://www.firewalll...er.com/wwdc.htm
under the picture where it says Link : WWDC.exe thats where the download link is. maybe backup your system first or at least make a restore point before you change anything :)

#4 OFFLINE   Adel

    Member

  • Members
  • PipPip
  • 38 posts

Posted 10 May 2005 - 10:13 PM

Thx guys for your replies, & sorry for the delay to report back.

Anyway I had a war going on in my pc between spysweeper & this so called jetico firewall that I made a huge mistake in downloading to temporarily use. SS keeps reporting this program as spyware & this firewall was preventing SS from monitoring my star-up programs. The end result? You guessed it! My computer crushed right in front of me. It kept rebooting up to the windows welcome screen & then go off. I was just watching this mayhem & wondering what my plan of action should be.

Tried to remove the new firewall, could not through add/remove. Tried through my computer/program files, to no avail. tried system restore, nothing was happening.
In the end, I had to do a system recovery/advanced option. Deleted everything & re-installed all my AV/Spyware programs/firewall ( not jetico of course)...

Now I have my computer back. A good learning experience considering how limited my knowledge is.

Talk to you soon.
Thx.