Security Problem: Please Help ~~~ Email problem ~~~ Resh, please read. AnandTech Moderator

[Resh]

For some reason, my friend's system's fresh install of Win98 SE is holding Port 80 Open despite a firewall being in place. Tried everything from Gibson's Research and can't seem to close it. The firewall doesn't even flinch when it gets requests.

Virus scans bring up nothing and the partition was formatted before reinstalling.

Please help! Thanks!

---

Your emailed subscription updates are being returned to us with the error message,

Reason: <******@*******>... User unknown

Please remember that we require our members to have a valid email address in their profile. Please update your profile to correct this problem. These returns clog our mailbox, so please do not subscribe to any more threads until your email is working correctly.

Thank you,

AnandTech Moderator

 

[obenton]

Can you identify the program or service that's listening on port 80?

 

[JellyBaby]

Which firewall are you using?

 

[BCYL]

Yeah, it should be your firewall problem instead of Windows problem... If you are not using ZoneAlarm, try it... download at http://www.zonelabs.com...

Also check what level of security you have set for your firewall...

 

[Resh]

To Forum Moderator: Sorry about the e-mail problem. I have updated the addy.

To Everyone Else: Thanks! Using ATGuard and Port 80 is open even before the firewall is installed. Cannot identify which proggie is listening on 80.

My personal systems are have no firewalls and all of my ports are open so I don't know why 80 would be open here.

Any other ideas?

Resh

 

[LordOfAll]

First off go to a DOS box and type netstat and post the results. This will tell you al open connections made to the PC.

 

[Resh]

Correction: All Ports are CLOSED on my personal systems.

Will do on the NetStat test.

Thanks again!

Resh

 

[Resh]

Finally got the NETSTAT info from my friend. Here it is:

---------
Active Connections

Proto Local Address Foreign Address State
TCP d2a5i8:1102 152.163.244.107:5190 ESTABLISHED
----------

Hope that means something to someone!

Thanks everyone and sorry for the delay.

Resh

 

[Damaged]

It's from ICQ which I assume you're using.