my ports on my computer

i don't know what i'm looking at. i scanned my self to see what i had open i used sscan205 and used the scanner list here is what i have....is this bad??? if so how can i close them...
|___ 110 [pop3] Post Office Protocol - Version 3
|___ 135 [epmap] DCE endpoint resolution
|___ 139 [netbios-ssn] NETBIOS Session Service
|___ 389 [ldap] Lightweight Directory Access Protocol
|___ 445 [microsoft-ds] Microsoft-DS
|___ 1025 [blackjack] network blackjack
|___ 1720 [h323hostcall] h323hostcall
|___ 5000 [commplex-main] ?
what is socket 23???

It depends on lot's o' stuff dude. A whole lot of stuff.

I'd be suspicious of a few of those ports, search this site and google for adware or trojan removal tools, or something similar. Scan with an updated antivirus. Unless of course you know why you have 5000 and the other odd ones open.

To close them easily and simply, get a firewall. Search google for windows firewalls. There are MANY threads on this site about recommended firewalls, use the search thing at the top right of the front page.

If that's Windows XP your running, learn how to use the built in Internet Connection Firewall (ICF) This should suit you just great. It's nice and simple to use.

If you still don't find enough answers from google to satisfy you, let us know. But alot of this stuff has either already been asked on this site, or has been covered extensively elsewhere on the internet.

- Good Day.

Jon.

Try this link, for starters...
http://www.chebucto.ns.ca/~rakerman/port-table.html

Enjoy! :)

As far as closing them, try installing a good personal firewall, many of which are free...

This link should point you in the right direction there...
http://www.firewallguide.com/

Quote:

---

Originally posted here by towboattrash34
i don't know what i'm looking at. i scanned my self to see what i had open i used sscan205 and used the scanner list here is what i have....is this bad??? if so how can i close them...
|___ 110 [pop3] Post Office Protocol - Version 3
|___ 135 [epmap] DCE endpoint resolution
|___ 139 [netbios-ssn] NETBIOS Session Service
|___ 389 [ldap] Lightweight Directory Access Protocol
|___ 445 [microsoft-ds] Microsoft-DS
|___ 1025 [blackjack] network blackjack
|___ 1720 [h323hostcall] h323hostcall
|___ 5000 [commplex-main] ?
what is socket 23???

---

But first, have you before scanning closed all browser windows? And what are you running? Dial-up(modem) or cable internet or something else? I am connecting with modem and the ports what I have are only 135 and 139.

Ooh, you running port 139? Uh, whats your ip address.....*cough cough* :D

thanks i am running xp/norton anti virus pro2004/za pro/dialup......... well when i installed sscan205 it probily put a few things on............Zetaphor....Ooh, you running port 139? Uh, whats your ip address.....*cough cough*............hehehe u wish........... :D :D

Quote:

---

Originally posted here by Zetaphor
Ooh, you running port 139? Uh, whats your ip address.....*cough cough* :D

---

Eh? Whats bad about it? What I know, many computers are running 139.

Tow, for starters, unless you're on a network or need to share files with other computers, I'd recommend disabling netBIOS and port 445.
Read this article Here so you can better understand how to disable NetBIOS and how port 445 works in conjunction with NetBIOS on Windows XP.

As for port 110 being open, I believe CCAPP.EXE(part of Norton) is the culprit for that one as anytime I scanned myself, I found that port to be open as well (I have Norton 2003, not sure if 2004 still uses CCAPP.EXE). You can turn off your email scanning in Norton and then this port should be closed when you scan yourself again. Just remember though, the port may close but you no longer have email scanning active (It appears to be a catch 22).

Port 5000, from what I understand if a default Universal Plug and Play and the SSDP service for Windows XP. I don't believe it's used very often but I'm not sure in your case. I found this link Here that has a small program that can disable UPnP fairly easily.

The only thing I could find in regards to ports 389 and 1720 is in relation to connecting to the internet using NetMeeting. I don't know if this is a neccessary XP service or not.
port 389(LDAP) and port 1720(H.323 Host Call) are both used together with this NetMeeting. Article Here

I'm still looking about for port 1025. I'll keep you posted as to what I find.

Quote:

---

Originally posted here by ShagDevil
Tow, for starters, unless you're on a network or need to share files with other computers, I'd recommend disabling netBIOS and port 445.
Read this article Here so you can better understand how to disable NetBIOS and how port 445 works in conjunction with NetBIOS on Windows XP.

As for port 110 being open, I believe CCAPP.EXE(part of Norton) is the culprit for that one as anytime I scanned myself, I found that port to be open as well (I have Norton 2003, not sure if 2004 still uses CCAPP.EXE). You can turn off your email scanning in Norton and then this port should be closed when you scan yourself again. Just remember though, the port may close but you no longer have email scanning active (It appears to be a catch 22).

Port 5000, from what I understand if a default Universal Plug and Play and the SSDP service for Windows XP. I don't believe it's used very often but I'm not sure in your case. I found this link Here that has a small program that can disable UPnP fairly easily.

The only thing I could find in regards to ports 389 and 1720 is in relation to connecting to the internet using NetMeeting. I don't know if this is a neccessary XP service or not.
port 389(LDAP) and port 1720(H.323 Host Call) are both used together with this NetMeeting. Article Here

I'm still looking about for port 1025. I'll keep you posted as to what I find.

---

thanks bud some good info :cool:

Some ppl say its network blackjack, others say it's mstask.exe...I'm kind of confused myself.
Here's some interesting post about it

http://www.tek-tips.com/gviewthread....d/23/qid/71426

well i got a few ports closed as far as netmeeting goes it is not loaded but there is a folder in win/program files/netmeeting . just want to thansk to all for the good info. i have trojanhunter3.8 how good is that prog???

Quote:

---

Eh? Whats bad about it? What I know, many computers are running 139.

---

Thats file sharing, it can be a very good or bad thing to have it on.

go to https://grc.com/x/ne.dll?bh0bkyd2

this is an easy to understand one


it tells you what every thing means

Quote:

---

Originally posted here by disturb
go to https://grc.com/x/ne.dll?bh0bkyd2

this is an easy to understand one


it tells you what every thing means

---

well i went there and it said that everything was closed or stealth

Interesting to see GRC posted here, I've been using their advice for years. I wondered just how effective their advice was about reconfiguring the ports on your system, and found out its effectiveness when my service provider's tech support group attempted to ping my computer. Their reaction..."What computer, is it even on??".

Does anyone have any experiences with this type of reconfiguring and problems they have encountered by closing off all of their ports?

My advice to the NetBios port, close that thing off immediately, it was anticipated to be one of the largest vulnerabilities to the Windows platform years ago. Why MS continues to ship out the OS with this port open is beyond me.

Quote:

---

i don't know what i'm looking at. i scanned my self to see what i had open i used sscan205 and used the scanner list here is what i have....is this bad??? if so how can i close them...
|___ 110 [pop3] Post Office Protocol - Version 3
|___ 135 [epmap] DCE endpoint resolution
|___ 139 [netbios-ssn] NETBIOS Session Service
|___ 389 [ldap] Lightweight Directory Access Protocol
|___ 445 [microsoft-ds] Microsoft-DS
|___ 1025 [blackjack] network blackjack
|___ 1720 [h323hostcall] h323hostcall
|___ 5000 [commplex-main] ?
what is socket 23???

---

What you're looking at is 8 different ports that are currently open running different services. The name to the right of the port number is the service that is running. Running unneccessary services on your computer is a bad idea. Example 139, if your not using this disable it. There are plenty of tutorials at antionline.com on basic security for your PC.

why not just get a sofware firewall which will stealth all of those?