PDA

View Full Version : Security Test reveals a port open.. how do I close it?


TrevGlas
09-18-03, 07:50 PM
Sup SG, I just went through a series of security scans, and one of them found this info

Working - Results for xx.xxx.xxx.xx appear below when complete. Please be patient - 60 sec max.

Type Port Services, Programs and Trojans that are commonly found to be running on this port. (Possible Trojans appear italicized)

tcp 1600 issd. Direct Connection. Shivka-Burka.
(THIS WAS ITALICIZED)

The following ports have been reported open! I've attempted to give you information about what software might be listening on your open ports. If you are a typical home computer user and did not intentionally install a service, then you should not find any open ports.

I recommend that you pay a visit to our reading room (under Learn) and review the security overview document for general information on security risks.


How in the hell do I close this port?

Thanks everyone,

Trev

cyberskye
09-18-03, 08:57 PM
Terminate the process that binds to it. A port can only be open because software opened it - server, trojan, networking modules in an OS - all could bind to (therefore open) a port.

Easier would be to install a firewall, antivirus, and a spyware/adware remover.

Keep all updated and do thorough scans regularly.

cyberskye
09-18-03, 08:58 PM
http://www.glocksoft.com/trojan_list/Shivka_Burka.htm

Doesn't mean that's what it is - any app can potentially open any port above 1023.

Skye

TrevGlas
09-18-03, 09:43 PM
Well **** I went through my whole harddrive, none of those files from the Shivka Burka trojan, only 13 system processes, and I looked all of them up, all from Windows, hmm what could this be?

Trev

RAAF453_Shep
09-19-03, 12:01 PM
Man O Steel & Tony showed me how to close my open ports , what OS are you running ? I run full stealth thanks to them on XP pro. and SyGate FW is tops .. even the free version made a remarkable difference.

TrevGlas
09-20-03, 10:18 AM
Well I'm running a router, but I think I got this problem resolved. I think it was just some Spyware that was on my comp. I ran ad-aware and all my ports come up as stealth now :P

Trev

RAAF453_Shep
09-20-03, 10:56 AM
good to hear Trev.

cygnusx4033
10-07-03, 12:59 AM
if u are running windows make sure u got all the critical updates