Results 1 to 20 of 20

Thread: Win 7 Open Ports

  1. #1
    Super Moderator WhiteOx's Avatar
    Join Date
    Jan 2008
    Location
    Newcastle, Nsw
    Posts
    2,539
    Thanks
    345
    Thanked 954 Times in 382 Posts
    Rep Power
    25

    Default Win 7 Open Ports

    Can anyone tell me if Win 7 runs any kind of web server etc; by default?

    I have port 80 and port 443 open for some reason and I'll be stuffed if I can find out why.

    My Billion has a firewall which is enabled and I also use ESET Smart Security with firewall enabled, yet these 2 ports remain to be seen when testing my security with ShieldsUp

    It's got me stumped.

  2. #2
    Super Moderator WhiteOx's Avatar
    Join Date
    Jan 2008
    Location
    Newcastle, Nsw
    Posts
    2,539
    Thanks
    345
    Thanked 954 Times in 382 Posts
    Rep Power
    25

    Default

    I just found these in my firewall log, not sure if it means anything since they are LAN IP addresses:
    Date: 25/01/2012
    Time: 8:00:34 AM
    Event: Detected ARP cache poisoning attack
    Source: 192.168.1.254
    Target: 192.168.1.3
    Protocol: ARP

    Date: 20/01/2012
    Time: 1:19:59 PM
    Event: Detected ARP cache poisoning attack
    Source: 192.168.1.254
    Target: 192.168.1.2
    Protocol: ARP

  3. #3
    Premium Member mickstv's Avatar
    Join Date
    Jan 2010
    Age
    41
    Posts
    3,496
    Thanks
    1,492
    Thanked 1,816 Times in 1,101 Posts
    Rep Power
    173

    Default

    The only thing I could suggest is install a copy of netlimiter 3 and you might be able to work out what programs are using the ports.



    Mick
    Last edited by mickstv; 27-01-12 at 08:35 AM.

  4. The Following User Says Thank You to mickstv For This Useful Post:

    WhiteOx (27-01-12)

  5. #4
    Super Moderator WhiteOx's Avatar
    Join Date
    Jan 2008
    Location
    Newcastle, Nsw
    Posts
    2,539
    Thanks
    345
    Thanked 954 Times in 382 Posts
    Rep Power
    25

    Default

    Thanks Mick,
    I'll have a look for it now.

  6. #5
    Super Moderator WhiteOx's Avatar
    Join Date
    Jan 2008
    Location
    Newcastle, Nsw
    Posts
    2,539
    Thanks
    345
    Thanked 954 Times in 382 Posts
    Rep Power
    25

    Default

    Well, got it installed and registered but I'll be buggered if I know how to use to.

  7. #6
    Premium Member mickstv's Avatar
    Join Date
    Jan 2010
    Age
    41
    Posts
    3,496
    Thanks
    1,492
    Thanked 1,816 Times in 1,101 Posts
    Rep Power
    173

    Default

    In the main window (node view) any program file that has a + next to it click on the + and it will either open up a list of address that are being sent/received. If when you click on the + and it brings up the word process click on it and it will then bring up the addresses.

    Hopefully you can find the one relating to the addresses being used.







    Mick
    Last edited by mickstv; 27-01-12 at 10:38 AM.

  8. The Following 2 Users Say Thank You to mickstv For This Useful Post:

    WhiteOx (27-01-12)

  9. #7
    Senior Member best4less's Avatar
    Join Date
    Jan 2008
    Location
    Australia
    Posts
    7,118
    Thanks
    2,925
    Thanked 1,800 Times in 932 Posts
    Rep Power
    242

    Default

    That's the name Mick , Bob The Builder LOL
    When you do things right, people won't be sure that you have done anything at all

  10. #8
    Premium Member mickstv's Avatar
    Join Date
    Jan 2010
    Age
    41
    Posts
    3,496
    Thanks
    1,492
    Thanked 1,816 Times in 1,101 Posts
    Rep Power
    173

    Default

    Quote Originally Posted by best4less View Post
    That's the name Mick , Bob The Builder LOL

    I was wondering how long it would take. LOL

    For some reason that was the name that poped into my head when I was doing a quick install so I could do a screenshot, hmmm maybe I was watching Bob the Builder. LOL




    Mick

  11. #9
    Senior Member best4less's Avatar
    Join Date
    Jan 2008
    Location
    Australia
    Posts
    7,118
    Thanks
    2,925
    Thanked 1,800 Times in 932 Posts
    Rep Power
    242

    Default

    You are painting a very scary picture Bob LOL
    When you do things right, people won't be sure that you have done anything at all

  12. #10
    Senior Member
    Join Date
    Jan 2008
    Posts
    194
    Thanks
    10
    Thanked 35 Times in 23 Posts
    Rep Power
    10

    Default

    maybe I'm way off here, but would not the web browser need port 80 to be open for normal http:// and from memory port 443 is standard for https://

  13. The Following 2 Users Say Thank You to mudcrab For This Useful Post:

    best4less (27-01-12),OSIRUS (27-01-12)

  14. #11
    Super Moderator WhiteOx's Avatar
    Join Date
    Jan 2008
    Location
    Newcastle, Nsw
    Posts
    2,539
    Thanks
    345
    Thanked 954 Times in 382 Posts
    Rep Power
    25

    Default

    Quote Originally Posted by mudcrab View Post
    maybe I'm way off here, but would not the web browser need port 80 to be open for normal http:// and from memory port 443 is standard for https://
    Yeah mate but it shouldn't be seen form outside - it should be stealth.
    Go to yourself and see.
    Click on ShieldsUp
    Scroll down the page to "HOT SPOTS" and click the ShieldsUp!" link
    The next page will be a welcome screen blah,blah,blah
    Click on "proceed"
    Near the bottom of the page click on "Common Ports"
    Then wait for the results.

  15. The Following 3 Users Say Thank You to WhiteOx For This Useful Post:

    best4less (27-01-12),mickstv (27-01-12),mudcrab (27-01-12)

  16. #12
    Senior Member
    Join Date
    Jan 2008
    Location
    Location, Location
    Posts
    4,057
    Thanks
    1,170
    Thanked 929 Times in 531 Posts
    Rep Power
    129

    Default

    If you click on control panel -> program and features -> turn windows features on/off

    Do you see a check mark next to Internet Information Services?
    If you feed ducks at a pond, chances are your bound to feed a goose or two without even knowing it.

  17. The Following User Says Thank You to z1gg33 For This Useful Post:

    WhiteOx (27-01-12)

  18. #13
    Senior Member
    Join Date
    Jan 2008
    Location
    Location, Location
    Posts
    4,057
    Thanks
    1,170
    Thanked 929 Times in 531 Posts
    Rep Power
    129

    Default

    also run -> wf.msc will show some firewall details...

    another tool you could use is TCPView

    Last edited by z1gg33; 27-01-12 at 01:15 PM.
    If you feed ducks at a pond, chances are your bound to feed a goose or two without even knowing it.

  19. The Following User Says Thank You to z1gg33 For This Useful Post:

    WhiteOx (27-01-12)

  20. #14
    Super Moderator WhiteOx's Avatar
    Join Date
    Jan 2008
    Location
    Newcastle, Nsw
    Posts
    2,539
    Thanks
    345
    Thanked 954 Times in 382 Posts
    Rep Power
    25

    Default

    Quote Originally Posted by z1gg33 View Post
    If you click on control panel -> program and features -> turn windows features on/off

    Do you see a check mark next to Internet Information Services?
    IIS is turned off.
    I'll try the other tips you suggested.

    No Malware and an In Depth Viris Scan says it's clean.
    It's probably something simple I've overlooked.
    I won't rest until I find it.

  21. #15
    Super Moderator WhiteOx's Avatar
    Join Date
    Jan 2008
    Location
    Newcastle, Nsw
    Posts
    2,539
    Thanks
    345
    Thanked 954 Times in 382 Posts
    Rep Power
    25

    Default

    Quote Originally Posted by z1gg33 View Post
    also run -> wf.msc will show some firewall details...
    I'm not using windows firewall.
    I'm using the firewall that comes with ESET Smart Security.

    All my XP machines are fine it's just the one running Win 7 and it's a legit copy of Win 7.

  22. #16
    Premium Member mickstv's Avatar
    Join Date
    Jan 2010
    Age
    41
    Posts
    3,496
    Thanks
    1,492
    Thanked 1,816 Times in 1,101 Posts
    Rep Power
    173

    Default

    Hi WhiteOx, have a look at the link below, not sure if this is your answer....





    Mick

  23. The Following User Says Thank You to mickstv For This Useful Post:

    WhiteOx (27-01-12)

  24. #17
    Super Moderator WhiteOx's Avatar
    Join Date
    Jan 2008
    Location
    Newcastle, Nsw
    Posts
    2,539
    Thanks
    345
    Thanked 954 Times in 382 Posts
    Rep Power
    25

    Default

    Thanks Guys,
    I've finally found the problem.
    It's my 'Western Digital TV Live Hub' media center.

  25. The Following 3 Users Say Thank You to WhiteOx For This Useful Post:

    best4less (27-01-12),mickstv (27-01-12),z1gg33 (27-01-12)

  26. #18
    Senior Member
    Join Date
    Oct 2009
    Posts
    1,213
    Thanks
    802
    Thanked 398 Times in 197 Posts
    Rep Power
    52

    Default

    Glad to hear you found the root of your problem, but if ever your concerned about the possibility of your PC or perhaps a rogue program 'Calling home', try running Just log for 5 or 10 mins then check local IP's
    Whenever you feel sad, just remember, somewhere in this world is there's an idiot pulling a door that says "PUSH"

  27. The Following User Says Thank You to Seymour Butts For This Useful Post:

    WhiteOx (27-01-12)

  28. #19
    Super Moderator WhiteOx's Avatar
    Join Date
    Jan 2008
    Location
    Newcastle, Nsw
    Posts
    2,539
    Thanks
    345
    Thanked 954 Times in 382 Posts
    Rep Power
    25

    Default

    Thanks,
    I've just downloaded it just in case I come across something like this again.

  29. #20
    Senior Member fromaron's Avatar
    Join Date
    Jan 2008
    Posts
    1,441
    Thanks
    90
    Thanked 250 Times in 138 Posts
    Rep Power
    50

    Default

    Quote Originally Posted by Seymour Butts View Post
    Glad to hear you found the root of your problem, but if ever your concerned about the possibility of your PC or perhaps a rogue program 'Calling home', try running Just log for 5 or 10 mins then check local IP's
    +1 for Wireshark. Very handy tool, everyone should use it as it can tell you everything about your nework.

LinkBacks (?)


Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •