Solved: port TCP 139

Hello TechGuys, I am running Vista home premium. I use a few good free security scans including MyNetWatchman http://www.mynetwatchman.com/tools/sc/ on the scan i ran yesterday it picked up and "unknown file" and did not state whether it was clean or infected. I clicked on the unknown file and up came the result that it was regarding to port TCP 139. I googled TCP 139 and found this Audit My PC link http://www.auditmypc.com/port/tcp-port-139.asp and i learned that it is a virus and or trojan. My AV (avg free) and my AS software progs (spyware doctor, avg anti-spyware, SUPERanti-spyware and spybot s&d) have been unable to pick any virus or trojan up. I also found this link about TCP 139 being the single most dangerous port on the internet
http://www.iss.net/security_center/advice/Exploits/Ports/139/default.htm
I'm fairly new to computers and I am learning all the time but i get a bit worried dealing with potential security problems that i dont fully understand. Basically, if i have a virus or trojan, what can i use to find it and get rid of it and how do i close this particular port, or am i worrying about nothing? Any help you TechGuys can offer would be greatly appreciated. Thanks in advance

 

These ports are for file sharing , if you are not connected to other machines you can disable them by writing rules in your firewall. Ports 137, 138, and 139 or all for file sharing!

Right click my computer on your desktop/click manage/click services applications/click services and go down to TCP/Netbios, right click TCp choose properties and click disable and then stop the service!

 

Thanks, I have done that (clicked disable) in both the General and Logon tabs and its status is now disabled.

 

ok!

Depending on what firewall you are using , if it's a rules based you could write rules to block ports 137,138 and 139, but you should be ok now!

If any applications try to use these ports block that application by choosing deny!


Port 445 should also be blocked as hackers use this one to!


http://www.grc.com/port_445.htm

 

Thanks. I use Windows Firewall but I am thinking of changing as I have read that it is certainly not the best. Shields Up!! is another scan I regularly use and it has always come back as "stealth". I read about port 445 from your link and I am assuming that my ISP is preventing traffic from reaching me. One thing that I find unusual is that every Shields Up!! scan i do, it always comes back as "stealth" like I said, so would you know why Shields Up!! did not find a problem with port 139? Thanks

 

windows only blocks incoming, a very good free firewall is comodo. You should definetly instlal another firewall and once instlaled disable windows firewall in services!


Comodo firewall. Sign up it's free!

http://www.personalfirewall.trustix.com/


Threads on comodo!

http://www.wilderssecurity.com/forumdisplay.php?f=31

 

Thanks Khazars. I will do just that. I think this thread can be considered dealt with now. Cheers