PDA

View Full Version : Not a server but got "listeners"



AusDog
2008-09-25, 17:17
A file simple called system (can't get a path or a file assoc.) is listening at port 139. Svchost.exe just sent 35 bytes and received 190 at port 135. Alg.exe is listening at port 1028 (just outside the range of Shields up. I told Comodo Firewall that all 3 are blocked and closed my hardware firewall. Avira has not picked any of them out but Comodo Firewall did grab skinzipped.exe which is/was hidden and asked me to submit a copy which I did. Since Comodo first grabbed it it had made a dupe in another folder. I used Comodo to delete the two from Quarantine. If you aren't a server there should be nothing "listening", right? Hank

shelf life
2008-09-29, 15:32
Port 139 the default port (NetBios) is used in windows file and printer sharing
alg.exe, port can vary is used by windows built-in firewall.


there should be nothing "listening"
there will be listening "states" as applications are waiting for requests. most listening states are normal (unless you have malware) look under firewall>view active connections in comodo