Jump to content

change firewall settings


Recommended Posts

Guest Steve Tumasian
Posted
How do I add ports to block in the xp firewall? Thanks, Steve T
  • Replies 12
  • Created
  • Last Reply
Guest Gary S. Terhune
Posted

Re: change firewall settings

 

You don't add ports to block. You add "exceptions" to the blocked list.

Anything that isn't an exception, or a built in exception for standard

procedures (HTTP, for instance) are already blocked.

 

Why do you ask? What are you trying to accomplish?

 

--

 

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

 

"Steve Tumasian" <stumas@charter.net> wrote in message

news:eJDdDRk1HHA.1124@TK2MSFTNGP06.phx.gbl...

> How do I add ports to block in the xp firewall? Thanks, Steve T

>

Guest Steve Tumasian
Posted

Re: change firewall settings

 

I read on http://www.bootdisk.com that I may be getting pop ups on my desktop

because spyware is getting through ports 135, 137-139 & 445 and I should

block them. It also states that ZoneAlarm blocks these by default. I don't

necessarily want to go the ZA route as I already have a router with a

firewall. Thanks, Steve T.

"Gary S. Terhune" <none> wrote in message

news:eFGvwkk1HHA.3548@TK2MSFTNGP04.phx.gbl...

> You don't add ports to block. You add "exceptions" to the blocked list.

> Anything that isn't an exception, or a built in exception for standard

> procedures (HTTP, for instance) are already blocked.

>

> Why do you ask? What are you trying to accomplish?

>

> --

>

> Gary S. Terhune

> MS-MVP Shell/User

> http://www.grystmill.com

>

> "Steve Tumasian" <stumas@charter.net> wrote in message

> news:eJDdDRk1HHA.1124@TK2MSFTNGP06.phx.gbl...

>> How do I add ports to block in the xp firewall? Thanks, Steve T

>>

>

>

Guest Gary S. Terhune
Posted

Re: change firewall settings

 

Well, you can't do it using Windows Firewall. Perhaps you can do it at the

router?

 

--

 

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

 

"Steve Tumasian" <stumas@charter.net> wrote in message

news:eW$ubpk1HHA.3760@TK2MSFTNGP03.phx.gbl...

>I read on http://www.bootdisk.com that I may be getting pop ups on my desktop

>because spyware is getting through ports 135, 137-139 & 445 and I should

>block them. It also states that ZoneAlarm blocks these by default. I don't

>necessarily want to go the ZA route as I already have a router with a

>firewall. Thanks, Steve T.

> "Gary S. Terhune" <none> wrote in message

> news:eFGvwkk1HHA.3548@TK2MSFTNGP04.phx.gbl...

>> You don't add ports to block. You add "exceptions" to the blocked list.

>> Anything that isn't an exception, or a built in exception for standard

>> procedures (HTTP, for instance) are already blocked.

>>

>> Why do you ask? What are you trying to accomplish?

>>

>> --

>>

>> Gary S. Terhune

>> MS-MVP Shell/User

>> http://www.grystmill.com

>>

>> "Steve Tumasian" <stumas@charter.net> wrote in message

>> news:eJDdDRk1HHA.1124@TK2MSFTNGP06.phx.gbl...

>>> How do I add ports to block in the xp firewall? Thanks, Steve T

>>>

>>

>>

>

>

Guest Brian A.
Posted

Re: change firewall settings

 

Click Start > Settings > Control Panel > Firewall applet > Exceptions tab > File

and Print Sharing > Edit button.

If the Scope is "Any" which is actually "Any computer, even those on the internet":

Click the Change Scope button and change it to "My Network (Subnet) only.

Ok your way out.

 

--

 

Brian A. Sesko { MS MVP_Shell/User }

Conflicts start where information lacks.

http://basconotw.mvps.org/

 

Suggested posting do's/don'ts: http://www.dts-l.org/goodpost.htm

How to ask a question: http://support.microsoft.com/kb/555375

 

 

"Steve Tumasian" <stumas@charter.net> wrote in message

news:eW$ubpk1HHA.3760@TK2MSFTNGP03.phx.gbl...

>I read on http://www.bootdisk.com that I may be getting pop ups on my desktop because

>spyware is getting through ports 135, 137-139 & 445 and I should block them. It also

>states that ZoneAlarm blocks these by default. I don't necessarily want to go the ZA

>route as I already have a router with a firewall. Thanks, Steve T.

> "Gary S. Terhune" <none> wrote in message

> news:eFGvwkk1HHA.3548@TK2MSFTNGP04.phx.gbl...

>> You don't add ports to block. You add "exceptions" to the blocked list. Anything

>> that isn't an exception, or a built in exception for standard procedures (HTTP,

>> for instance) are already blocked.

>>

>> Why do you ask? What are you trying to accomplish?

>>

>> --

>>

>> Gary S. Terhune

>> MS-MVP Shell/User

>> http://www.grystmill.com

>>

>> "Steve Tumasian" <stumas@charter.net> wrote in message

>> news:eJDdDRk1HHA.1124@TK2MSFTNGP06.phx.gbl...

>>> How do I add ports to block in the xp firewall? Thanks, Steve T

>>>

>>

>>

>

>

Guest Newbie Coder
Posted

Re: change firewall settings

 

Steve,

 

Why are you trusting BootDisk.Com as their hompage used to generate so many

popups.

 

--

Newbie Coder

(It's just a name)

 

 

"Steve Tumasian" <stumas@charter.net> wrote in message

news:eW$ubpk1HHA.3760@TK2MSFTNGP03.phx.gbl...

> I read on http://www.bootdisk.com that I may be getting pop ups on my desktop

> because spyware is getting through ports 135, 137-139 & 445 and I should

> block them. It also states that ZoneAlarm blocks these by default. I don't

> necessarily want to go the ZA route as I already have a router with a

> firewall. Thanks, Steve T.

> "Gary S. Terhune" <none> wrote in message

> news:eFGvwkk1HHA.3548@TK2MSFTNGP04.phx.gbl...

> > You don't add ports to block. You add "exceptions" to the blocked list.

> > Anything that isn't an exception, or a built in exception for standard

> > procedures (HTTP, for instance) are already blocked.

> >

> > Why do you ask? What are you trying to accomplish?

> >

> > --

> >

> > Gary S. Terhune

> > MS-MVP Shell/User

> > http://www.grystmill.com

> >

> > "Steve Tumasian" <stumas@charter.net> wrote in message

> > news:eJDdDRk1HHA.1124@TK2MSFTNGP06.phx.gbl...

> >> How do I add ports to block in the xp firewall? Thanks, Steve T

> >>

> >

> >

>

>

Guest Lanwench [MVP - Exchange]
Posted

Re: change firewall settings

 

Steve Tumasian <stumas@charter.net> wrote:

> I read on http://www.bootdisk.com that I may be getting pop ups on my desktop

> because spyware is getting through ports 135, 137-139 & 445 and I

> should block them. It also states that ZoneAlarm blocks these by

> default. I don't necessarily want to go the ZA route as I already

> have a router with a firewall. Thanks, Steve T.

 

The Windows firewall blocks all inbound connections except for those you see

in its Exceptions. (ZA and others can also block *outbound* connections). I

find it highly unlikely that your popups are due to firewall holes.

 

Most likely, you have spyware/malware *installed and running* on your

computer...which you or some other user inadvertently invited in. Therefore,

the correct course of action would be to address the cause, not the

symptoms, by cleaning up the malware.

 

Check out http://www.elephantboycomputers.com/page2.html#Viruses_Malware for

starters, and try posting in microsoft.public.security.homeusers for some

help with your situation.

 

>

> "Gary S. Terhune" <none> wrote in message

> news:eFGvwkk1HHA.3548@TK2MSFTNGP04.phx.gbl...;

>> You don't add ports to block. You add "exceptions" to the blocked

>> list. Anything that isn't an exception, or a built in exception for

>> standard procedures (HTTP, for instance) are already blocked.

>>

>> Why do you ask? What are you trying to accomplish?

>>

>> --

>>

>> Gary S. Terhune

>> MS-MVP Shell/User

>> http://www.grystmill.com

>>

>> "Steve Tumasian" <stumas@charter.net> wrote in message

>> news:eJDdDRk1HHA.1124@TK2MSFTNGP06.phx.gbl...

>>> How do I add ports to block in the xp firewall? Thanks, Steve T

Guest Steve T
Posted

Re: change firewall settings

 

Thanks Lawrence. I'm just trying to find a solution to the desktop pop ups.

The firewall settings was one suggestion to a previous post on July 31. I

have already gone through the Ad-Aware, Spybot, SuperAntii, CWShredder,

Multi_Av, all in Normal and Safe modes without any resolve. I'm at the point

of having my Gateway go through a Restore/Recover operation and worry about

re-installing my apps. This all started last weekend after downloading some

old MADTV and In Living Color videos from Youtube with a free converter from

Snapfiles.com. Don't know if it was co-incidence or what. All of the above

apps were up to date. My AV is from CA and I've never had a problem with it.

The Multi_Av was also a suggestion. Steve T.

"Lanwench [MVP - Exchange]"

<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message

news:uCkaYlp1HHA.3788@TK2MSFTNGP02.phx.gbl...

> Steve Tumasian <stumas@charter.net> wrote:

>> I read on http://www.bootdisk.com that I may be getting pop ups on my desktop

>> because spyware is getting through ports 135, 137-139 & 445 and I

>> should block them. It also states that ZoneAlarm blocks these by

>> default. I don't necessarily want to go the ZA route as I already

>> have a router with a firewall. Thanks, Steve T.

>

> The Windows firewall blocks all inbound connections except for those you

> see in its Exceptions. (ZA and others can also block *outbound*

> connections). I find it highly unlikely that your popups are due to

> firewall holes.

>

> Most likely, you have spyware/malware *installed and running* on your

> computer...which you or some other user inadvertently invited in.

> Therefore, the correct course of action would be to address the cause, not

> the symptoms, by cleaning up the malware.

>

> Check out http://www.elephantboycomputers.com/page2.html#Viruses_Malware

> for starters, and try posting in microsoft.public.security.homeusers for

> some help with your situation.

>

>

>>

>> "Gary S. Terhune" <none> wrote in message

>> news:eFGvwkk1HHA.3548@TK2MSFTNGP04.phx.gbl...;

>>> You don't add ports to block. You add "exceptions" to the blocked

>>> list. Anything that isn't an exception, or a built in exception for

>>> standard procedures (HTTP, for instance) are already blocked.

>>>

>>> Why do you ask? What are you trying to accomplish?

>>>

>>> --

>>>

>>> Gary S. Terhune

>>> MS-MVP Shell/User

>>> http://www.grystmill.com

>>>

>>> "Steve Tumasian" <stumas@charter.net> wrote in message

>>> news:eJDdDRk1HHA.1124@TK2MSFTNGP06.phx.gbl...

>>>> How do I add ports to block in the xp firewall? Thanks, Steve T

>

>

>

Guest Gary S. Terhune
Posted

Re: change firewall settings

 

Have you run HijackThis and posted the log to an appropriate forum (do NOT

post it here)?

 

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

 

"Steve T" <stumas@NOBINGOcharter.net> wrote in message

news:uvbsHtr1HHA.3400@TK2MSFTNGP03.phx.gbl...

> Thanks Lawrence. I'm just trying to find a solution to the desktop pop

> ups. The firewall settings was one suggestion to a previous post on July

> 31. I have already gone through the Ad-Aware, Spybot, SuperAntii,

> CWShredder, Multi_Av, all in Normal and Safe modes without any resolve.

> I'm at the point of having my Gateway go through a Restore/Recover

> operation and worry about re-installing my apps. This all started last

> weekend after downloading some old MADTV and In Living Color videos from

> Youtube with a free converter from Snapfiles.com. Don't know if it was

> co-incidence or what. All of the above apps were up to date. My AV is from

> CA and I've never had a problem with it. The Multi_Av was also a

> suggestion. Steve T.

> "Lanwench [MVP - Exchange]"

> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

> message news:uCkaYlp1HHA.3788@TK2MSFTNGP02.phx.gbl...

>> Steve Tumasian <stumas@charter.net> wrote:

>>> I read on http://www.bootdisk.com that I may be getting pop ups on my desktop

>>> because spyware is getting through ports 135, 137-139 & 445 and I

>>> should block them. It also states that ZoneAlarm blocks these by

>>> default. I don't necessarily want to go the ZA route as I already

>>> have a router with a firewall. Thanks, Steve T.

>>

>> The Windows firewall blocks all inbound connections except for those you

>> see in its Exceptions. (ZA and others can also block *outbound*

>> connections). I find it highly unlikely that your popups are due to

>> firewall holes.

>>

>> Most likely, you have spyware/malware *installed and running* on your

>> computer...which you or some other user inadvertently invited in.

>> Therefore, the correct course of action would be to address the cause,

>> not the symptoms, by cleaning up the malware.

>>

>> Check out http://www.elephantboycomputers.com/page2.html#Viruses_Malware

>> for starters, and try posting in microsoft.public.security.homeusers for

>> some help with your situation.

>>

>>

>>>

>>> "Gary S. Terhune" <none> wrote in message

>>> news:eFGvwkk1HHA.3548@TK2MSFTNGP04.phx.gbl...;

>>>> You don't add ports to block. You add "exceptions" to the blocked

>>>> list. Anything that isn't an exception, or a built in exception for

>>>> standard procedures (HTTP, for instance) are already blocked.

>>>>

>>>> Why do you ask? What are you trying to accomplish?

>>>>

>>>> --

>>>>

>>>> Gary S. Terhune

>>>> MS-MVP Shell/User

>>>> http://www.grystmill.com

>>>>

>>>> "Steve Tumasian" <stumas@charter.net> wrote in message

>>>> news:eJDdDRk1HHA.1124@TK2MSFTNGP06.phx.gbl...

>>>>> How do I add ports to block in the xp firewall? Thanks, Steve T

>>

>>

>>

>

>

Guest Newbie Coder
Posted

Re: change firewall settings

 

Gary,

 

HiJackThis doesn't delete some entries properly if they are in use at the time &

I have noticed it won't delete some entries even if they aren't in use. That is

with version 1.99.1

 

I have got people to post their logs here as an attachment so people don't throw

their toys around

 

--

Newbie Coder

(It's just a name)

 

 

"Gary S. Terhune" <none> wrote in message

news:e2GL57r1HHA.4672@TK2MSFTNGP05.phx.gbl...

> Have you run HijackThis and posted the log to an appropriate forum (do NOT

> post it here)?

>

> --

> Gary S. Terhune

> MS-MVP Shell/User

> http://www.grystmill.com

>

> "Steve T" <stumas@NOBINGOcharter.net> wrote in message

> news:uvbsHtr1HHA.3400@TK2MSFTNGP03.phx.gbl...

> > Thanks Lawrence. I'm just trying to find a solution to the desktop pop

> > ups. The firewall settings was one suggestion to a previous post on July

> > 31. I have already gone through the Ad-Aware, Spybot, SuperAntii,

> > CWShredder, Multi_Av, all in Normal and Safe modes without any resolve.

> > I'm at the point of having my Gateway go through a Restore/Recover

> > operation and worry about re-installing my apps. This all started last

> > weekend after downloading some old MADTV and In Living Color videos from

> > Youtube with a free converter from Snapfiles.com. Don't know if it was

> > co-incidence or what. All of the above apps were up to date. My AV is from

> > CA and I've never had a problem with it. The Multi_Av was also a

> > suggestion. Steve T.

> > "Lanwench [MVP - Exchange]"

> > <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

> > message news:uCkaYlp1HHA.3788@TK2MSFTNGP02.phx.gbl...

> >> Steve Tumasian <stumas@charter.net> wrote:

> >>> I read on http://www.bootdisk.com that I may be getting pop ups on my desktop

> >>> because spyware is getting through ports 135, 137-139 & 445 and I

> >>> should block them. It also states that ZoneAlarm blocks these by

> >>> default. I don't necessarily want to go the ZA route as I already

> >>> have a router with a firewall. Thanks, Steve T.

> >>

> >> The Windows firewall blocks all inbound connections except for those you

> >> see in its Exceptions. (ZA and others can also block *outbound*

> >> connections). I find it highly unlikely that your popups are due to

> >> firewall holes.

> >>

> >> Most likely, you have spyware/malware *installed and running* on your

> >> computer...which you or some other user inadvertently invited in.

> >> Therefore, the correct course of action would be to address the cause,

> >> not the symptoms, by cleaning up the malware.

> >>

> >> Check out http://www.elephantboycomputers.com/page2.html#Viruses_Malware

> >> for starters, and try posting in microsoft.public.security.homeusers for

> >> some help with your situation.

> >>

> >>

> >>>

> >>> "Gary S. Terhune" <none> wrote in message

> >>> news:eFGvwkk1HHA.3548@TK2MSFTNGP04.phx.gbl...;

> >>>> You don't add ports to block. You add "exceptions" to the blocked

> >>>> list. Anything that isn't an exception, or a built in exception for

> >>>> standard procedures (HTTP, for instance) are already blocked.

> >>>>

> >>>> Why do you ask? What are you trying to accomplish?

> >>>>

> >>>> --

> >>>>

> >>>> Gary S. Terhune

> >>>> MS-MVP Shell/User

> >>>> http://www.grystmill.com

> >>>>

> >>>> "Steve Tumasian" <stumas@charter.net> wrote in message

> >>>> news:eJDdDRk1HHA.1124@TK2MSFTNGP06.phx.gbl...

> >>>>> How do I add ports to block in the xp firewall? Thanks, Steve T

> >>

> >>

> >>

> >

> >

>

>

Guest Gary S. Terhune
Posted

Re: change firewall settings

 

DO NOT post HJT logs here. It is NOT the proper forum. Post them to an

appropriate forum where REAL experts can deal with them. Normally, all of

the stuff that HJT finds is *supposed* to be left alone. One false move and

the system gets trashed!

 

--

Gary S. Terhune

MS-MVP Shell/User

http://www.grystmill.com

 

"Newbie Coder" <newbiecoder@spammeplease.com> wrote in message

news:uukFKYt1HHA.1124@TK2MSFTNGP06.phx.gbl...

> Gary,

>

> HiJackThis doesn't delete some entries properly if they are in use at the

> time &

> I have noticed it won't delete some entries even if they aren't in use.

> That is

> with version 1.99.1

>

> I have got people to post their logs here as an attachment so people don't

> throw

> their toys around

>

> --

> Newbie Coder

> (It's just a name)

>

>

> "Gary S. Terhune" <none> wrote in message

> news:e2GL57r1HHA.4672@TK2MSFTNGP05.phx.gbl...

>> Have you run HijackThis and posted the log to an appropriate forum (do

>> NOT

>> post it here)?

>>

>> --

>> Gary S. Terhune

>> MS-MVP Shell/User

>> http://www.grystmill.com

>>

>> "Steve T" <stumas@NOBINGOcharter.net> wrote in message

>> news:uvbsHtr1HHA.3400@TK2MSFTNGP03.phx.gbl...

>> > Thanks Lawrence. I'm just trying to find a solution to the desktop pop

>> > ups. The firewall settings was one suggestion to a previous post on

>> > July

>> > 31. I have already gone through the Ad-Aware, Spybot, SuperAntii,

>> > CWShredder, Multi_Av, all in Normal and Safe modes without any resolve.

>> > I'm at the point of having my Gateway go through a Restore/Recover

>> > operation and worry about re-installing my apps. This all started last

>> > weekend after downloading some old MADTV and In Living Color videos

>> > from

>> > Youtube with a free converter from Snapfiles.com. Don't know if it was

>> > co-incidence or what. All of the above apps were up to date. My AV is

>> > from

>> > CA and I've never had a problem with it. The Multi_Av was also a

>> > suggestion. Steve T.

>> > "Lanwench [MVP - Exchange]"

>> > <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

>> > message news:uCkaYlp1HHA.3788@TK2MSFTNGP02.phx.gbl...

>> >> Steve Tumasian <stumas@charter.net> wrote:

>> >>> I read on http://www.bootdisk.com that I may be getting pop ups on my

>> >>> desktop

>> >>> because spyware is getting through ports 135, 137-139 & 445 and I

>> >>> should block them. It also states that ZoneAlarm blocks these by

>> >>> default. I don't necessarily want to go the ZA route as I already

>> >>> have a router with a firewall. Thanks, Steve T.

>> >>

>> >> The Windows firewall blocks all inbound connections except for those

>> >> you

>> >> see in its Exceptions. (ZA and others can also block *outbound*

>> >> connections). I find it highly unlikely that your popups are due to

>> >> firewall holes.

>> >>

>> >> Most likely, you have spyware/malware *installed and running* on your

>> >> computer...which you or some other user inadvertently invited in.

>> >> Therefore, the correct course of action would be to address the cause,

>> >> not the symptoms, by cleaning up the malware.

>> >>

>> >> Check out

>> >> http://www.elephantboycomputers.com/page2.html#Viruses_Malware

>> >> for starters, and try posting in microsoft.public.security.homeusers

>> >> for

>> >> some help with your situation.

>> >>

>> >>

>> >>>

>> >>> "Gary S. Terhune" <none> wrote in message

>> >>> news:eFGvwkk1HHA.3548@TK2MSFTNGP04.phx.gbl...;

>> >>>> You don't add ports to block. You add "exceptions" to the blocked

>> >>>> list. Anything that isn't an exception, or a built in exception for

>> >>>> standard procedures (HTTP, for instance) are already blocked.

>> >>>>

>> >>>> Why do you ask? What are you trying to accomplish?

>> >>>>

>> >>>> --

>> >>>>

>> >>>> Gary S. Terhune

>> >>>> MS-MVP Shell/User

>> >>>> http://www.grystmill.com

>> >>>>

>> >>>> "Steve Tumasian" <stumas@charter.net> wrote in message

>> >>>> news:eJDdDRk1HHA.1124@TK2MSFTNGP06.phx.gbl...

>> >>>>> How do I add ports to block in the xp firewall? Thanks, Steve T

>> >>

>> >>

>> >>

>> >

>> >

>>

>>

>

>

Guest Brian A.
Posted

Re: change firewall settings

 

I agree with Gary 100%, this is not the proper place for posting HJT logs.

 

--

 

Brian A. Sesko { MS MVP_Shell/User }

Conflicts start where information lacks.

http://basconotw.mvps.org/

 

Suggested posting do's/don'ts: http://www.dts-l.org/goodpost.htm

How to ask a question: http://support.microsoft.com/kb/555375

 

 

"Newbie Coder" <newbiecoder@spammeplease.com> wrote in message

news:uukFKYt1HHA.1124@TK2MSFTNGP06.phx.gbl...

> Gary,

>

> HiJackThis doesn't delete some entries properly if they are in use at the time &

> I have noticed it won't delete some entries even if they aren't in use. That is

> with version 1.99.1

>

> I have got people to post their logs here as an attachment so people don't throw

> their toys around

>

> --

> Newbie Coder

> (It's just a name)

>

>

> "Gary S. Terhune" <none> wrote in message

> news:e2GL57r1HHA.4672@TK2MSFTNGP05.phx.gbl...

>> Have you run HijackThis and posted the log to an appropriate forum (do NOT

>> post it here)?

>>

>> --

>> Gary S. Terhune

>> MS-MVP Shell/User

>> http://www.grystmill.com

>>

>> "Steve T" <stumas@NOBINGOcharter.net> wrote in message

>> news:uvbsHtr1HHA.3400@TK2MSFTNGP03.phx.gbl...

>> > Thanks Lawrence. I'm just trying to find a solution to the desktop pop

>> > ups. The firewall settings was one suggestion to a previous post on July

>> > 31. I have already gone through the Ad-Aware, Spybot, SuperAntii,

>> > CWShredder, Multi_Av, all in Normal and Safe modes without any resolve.

>> > I'm at the point of having my Gateway go through a Restore/Recover

>> > operation and worry about re-installing my apps. This all started last

>> > weekend after downloading some old MADTV and In Living Color videos from

>> > Youtube with a free converter from Snapfiles.com. Don't know if it was

>> > co-incidence or what. All of the above apps were up to date. My AV is from

>> > CA and I've never had a problem with it. The Multi_Av was also a

>> > suggestion. Steve T.

>> > "Lanwench [MVP - Exchange]"

>> > <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

>> > message news:uCkaYlp1HHA.3788@TK2MSFTNGP02.phx.gbl...

>> >> Steve Tumasian <stumas@charter.net> wrote:

>> >>> I read on http://www.bootdisk.com that I may be getting pop ups on my desktop

>> >>> because spyware is getting through ports 135, 137-139 & 445 and I

>> >>> should block them. It also states that ZoneAlarm blocks these by

>> >>> default. I don't necessarily want to go the ZA route as I already

>> >>> have a router with a firewall. Thanks, Steve T.

>> >>

>> >> The Windows firewall blocks all inbound connections except for those you

>> >> see in its Exceptions. (ZA and others can also block *outbound*

>> >> connections). I find it highly unlikely that your popups are due to

>> >> firewall holes.

>> >>

>> >> Most likely, you have spyware/malware *installed and running* on your

>> >> computer...which you or some other user inadvertently invited in.

>> >> Therefore, the correct course of action would be to address the cause,

>> >> not the symptoms, by cleaning up the malware.

>> >>

>> >> Check out http://www.elephantboycomputers.com/page2.html#Viruses_Malware

>> >> for starters, and try posting in microsoft.public.security.homeusers for

>> >> some help with your situation.

>> >>

>> >>

>> >>>

>> >>> "Gary S. Terhune" <none> wrote in message

>> >>> news:eFGvwkk1HHA.3548@TK2MSFTNGP04.phx.gbl...;

>> >>>> You don't add ports to block. You add "exceptions" to the blocked

>> >>>> list. Anything that isn't an exception, or a built in exception for

>> >>>> standard procedures (HTTP, for instance) are already blocked.

>> >>>>

>> >>>> Why do you ask? What are you trying to accomplish?

>> >>>>

>> >>>> --

>> >>>>

>> >>>> Gary S. Terhune

>> >>>> MS-MVP Shell/User

>> >>>> http://www.grystmill.com

>> >>>>

>> >>>> "Steve Tumasian" <stumas@charter.net> wrote in message

>> >>>> news:eJDdDRk1HHA.1124@TK2MSFTNGP06.phx.gbl...

>> >>>>> How do I add ports to block in the xp firewall? Thanks, Steve T

>> >>

>> >>

>> >>

>> >

>> >

>>

>>

>

>

Guest Steve T
Posted

Re: change firewall settings

 

I had removed ZoneAlarm Pro from my PC about a month ago because of the slow

boot times. I re-installed it and within a couple of minutes it notified me

that "isys32.exe" was trying to connect to the internet. I allowed it and up

came the pop up from that website. I searched for the file, it was in

Windows\System32. I deleted it and I no longer have the problem. Previous to

deleting the file, I googled it and discovered mostly links discussing

spyware so I deleted it. Thank you Zone Alarm and thanks to all that offered

help. Steve T

"Brian A." <gonefish'n@afarawaylake> wrote in message

news:O%2374yCx1HHA.5740@TK2MSFTNGP04.phx.gbl...

> I agree with Gary 100%, this is not the proper place for posting HJT

> logs.

>

> --

>

> Brian A. Sesko { MS MVP_Shell/User }

> Conflicts start where information lacks.

> http://basconotw.mvps.org/

>

> Suggested posting do's/don'ts: http://www.dts-l.org/goodpost.htm

> How to ask a question: http://support.microsoft.com/kb/555375

>

>

> "Newbie Coder" <newbiecoder@spammeplease.com> wrote in message

> news:uukFKYt1HHA.1124@TK2MSFTNGP06.phx.gbl...

>> Gary,

>>

>> HiJackThis doesn't delete some entries properly if they are in use at the

>> time &

>> I have noticed it won't delete some entries even if they aren't in use.

>> That is

>> with version 1.99.1

>>

>> I have got people to post their logs here as an attachment so people

>> don't throw

>> their toys around

>>

>> --

>> Newbie Coder

>> (It's just a name)

>>

>>

>> "Gary S. Terhune" <none> wrote in message

>> news:e2GL57r1HHA.4672@TK2MSFTNGP05.phx.gbl...

>>> Have you run HijackThis and posted the log to an appropriate forum (do

>>> NOT

>>> post it here)?

>>>

>>> --

>>> Gary S. Terhune

>>> MS-MVP Shell/User

>>> http://www.grystmill.com

>>>

>>> "Steve T" <stumas@NOBINGOcharter.net> wrote in message

>>> news:uvbsHtr1HHA.3400@TK2MSFTNGP03.phx.gbl...

>>> > Thanks Lawrence. I'm just trying to find a solution to the desktop

>>> > pop

>>> > ups. The firewall settings was one suggestion to a previous post on

>>> > July

>>> > 31. I have already gone through the Ad-Aware, Spybot, SuperAntii,

>>> > CWShredder, Multi_Av, all in Normal and Safe modes without any

>>> > resolve.

>>> > I'm at the point of having my Gateway go through a Restore/Recover

>>> > operation and worry about re-installing my apps. This all started last

>>> > weekend after downloading some old MADTV and In Living Color videos

>>> > from

>>> > Youtube with a free converter from Snapfiles.com. Don't know if it was

>>> > co-incidence or what. All of the above apps were up to date. My AV is

>>> > from

>>> > CA and I've never had a problem with it. The Multi_Av was also a

>>> > suggestion. Steve T.

>>> > "Lanwench [MVP - Exchange]"

>>> > <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in

>>> > message news:uCkaYlp1HHA.3788@TK2MSFTNGP02.phx.gbl...

>>> >> Steve Tumasian <stumas@charter.net> wrote:

>>> >>> I read on http://www.bootdisk.com that I may be getting pop ups on my

>>> >>> desktop

>>> >>> because spyware is getting through ports 135, 137-139 & 445 and I

>>> >>> should block them. It also states that ZoneAlarm blocks these by

>>> >>> default. I don't necessarily want to go the ZA route as I already

>>> >>> have a router with a firewall. Thanks, Steve T.

>>> >>

>>> >> The Windows firewall blocks all inbound connections except for those

>>> >> you

>>> >> see in its Exceptions. (ZA and others can also block *outbound*

>>> >> connections). I find it highly unlikely that your popups are due to

>>> >> firewall holes.

>>> >>

>>> >> Most likely, you have spyware/malware *installed and running* on your

>>> >> computer...which you or some other user inadvertently invited in.

>>> >> Therefore, the correct course of action would be to address the

>>> >> cause,

>>> >> not the symptoms, by cleaning up the malware.

>>> >>

>>> >> Check out

>>> >> http://www.elephantboycomputers.com/page2.html#Viruses_Malware

>>> >> for starters, and try posting in microsoft.public.security.homeusers

>>> >> for

>>> >> some help with your situation.

>>> >>

>>> >>

>>> >>>

>>> >>> "Gary S. Terhune" <none> wrote in message

>>> >>> news:eFGvwkk1HHA.3548@TK2MSFTNGP04.phx.gbl...;

>>> >>>> You don't add ports to block. You add "exceptions" to the blocked

>>> >>>> list. Anything that isn't an exception, or a built in exception for

>>> >>>> standard procedures (HTTP, for instance) are already blocked.

>>> >>>>

>>> >>>> Why do you ask? What are you trying to accomplish?

>>> >>>>

>>> >>>> --

>>> >>>>

>>> >>>> Gary S. Terhune

>>> >>>> MS-MVP Shell/User

>>> >>>> http://www.grystmill.com

>>> >>>>

>>> >>>> "Steve Tumasian" <stumas@charter.net> wrote in message

>>> >>>> news:eJDdDRk1HHA.1124@TK2MSFTNGP06.phx.gbl...

>>> >>>>> How do I add ports to block in the xp firewall? Thanks, Steve T

>>> >>

>>> >>

>>> >>

>>> >

>>> >

>>>

>>>

>>

>>

>


×
×
  • Create New...