Forum Home
Press F1
 
Thread ID: 78614 2007-04-22 08:12:00 Anyone tried this? lotse (11963) Press F1
Post ID Timestamp Content User
543172 2007-04-22 08:12:00 It certainly looks interesting:

Windows worms doors cleaner


Windows Worms Doors Cleaner features :

Main features :
- disabling the critical windows services used by the worms
- closing so indirectly the critical ports

Aditional ones :
- displays the local opened ports
- runnable with command line parameters
- check at start the name of running processes (to detect famous worms)
- check svchost memory usage


www.firewallleaktester.com 		lotse (11963)
543173 2007-04-22 15:06:00 SiteAdviser says it's not a valid domain. Just be careful.

WayBack says this: web.archive.org

I see no activity for this year at all....Hmmmm? 		SurferJoe46 (51)
543174 2007-04-22 19:10:00 Strange, Firefox normally alerts me of invalid site domains..

Anyway, having had my PC probed by these chaps pcflank.com and GRC, I found port 139 was open. A quick search of the internet made me decide to give the program a go.

It sucessfully turned off the NetBios and port 139 is now closed - no problems. It did throw up an error message saying it couldn't find the windows messenger registry entry, but thats hardly surprising, as I don't have it installed :) 		lotse (11963)
543175 2007-04-22 20:12:00 Strange, Firefox normally alerts me of invalid site domains . .

Anyway, having had my PC probed by these chaps pcflank . com and GRC, I found port 139 was open . A quick search of the internet made me decide to give the program a go .

It sucessfully turned off the NetBios and port 139 is now closed - no problems . It did throw up an error message saying it couldn't find the windows messenger registry entry, but thats hardly surprising, as I don't have it installed :)

Googled and got this:

Port 139 NetBIOS

NetBIOS Session (TCP), Windows File and Printer Sharing


This is the single most dangerous port on the Internet . All "File and Printer Sharing" on a Windows machine runs over this port . About 10% of all users on the Internet leave their hard disks exposed on this port . This is the first port hackers want to connect to, and the port that firewalls block .

. . and then I got to thinking that if you slam that port closed, your Messenger is dead too .

Then, I also got to thinking "Heck . . why should I worry about this? I have both a software and a hardware firewall installed . . . . . "

That should protect the drive-bys on that port pretty well .

I have printer and file sharing running, and behind my router and software versions, Shields Up ( . grc . com/x/portprobe=139" target="_blank">www . grc . com) reveals that I am fully STEALTHED on that port . . . I think the report you got, although true would not be a problem if you had the same setup .

(that link may not work , 'cause it is a secure site) 		SurferJoe46 (51)
1