Hi,
ZoneAlarm Firewall installed on a WinXP system is listening to ports without asking for authorization

Generic Host Process for Win32 Services Listening to ports UDP: 3544,1238
Process 1008

This seems to be abnormal, or Big gates is watching ?

Is there any tip to avoid this ?

By the way, address 64.4.25.85, which belongs to MS HOTMAIL is pinging UDP ports. Is there any MSN Messenger (not active) related ? Can I uninstal MSN Messenger safely from WinXP ?

sounds like zonealarm firewall is just doing it's duty..

But look at this registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Mi­crosoft\Windows NT\CurrentVersion\Svchost

it should tell you what each do and what ports they each generate
traffic on........

messenger........., gads....many issues but try to configure it to block NetBIOS and RPC traffic instead of turning off the Messenger
service and to turn off the service goto, control panel, administrative tools, services, find messenger, right click, properties, hit the stop button, set startup type to manual or disabled.

I guess I'm on the same page as you on this issue.

Hi moon,

no "MESSenger" services found...
Yes, Zonealarm is doing his duty, certainly, bur WinXP still is listening to some ports without authorization. On Win98SE, I had a true stealth mode, but since I installed WinXP, many ports are open... Sorry, my WinXp is in portuguese, so I've some difficulties to reach some functions.

The registry key HKEY_LOCAL_MACHINE\SOFTWARE\Mi­crosoft\Windows NT\CurrentVersion\Svchost does not exist in my registry.

Edited: sorry moon, it does (I've just missed it )
Will check all before posting again...

Regards,

Chris

Hi again,
That's what I've found:

Dcomlaunch DcomLaunch Termservice
HTTPFilter HTTPFilter
imgsvc StiSvc
LocalService Alerter WebClient LmHosts RemoteRegistry upnphost...
netsvcs 6to4 AppMgmt AudioSrv Browser CryptSvc DMServer...
NetworkService DnsCache
p2psvc RpcSs
termsvcs TermService

Seems to have messed with some lan or services properties