Ports Listening - DCOM Related?

Discussion in 'Port Explorer' started by someuser123, Dec 25, 2003.

Thread Status:
Not open for further replies.
  1. someuser123

    someuser123 Registered Member

    Joined:
    Dec 25, 2003
    Posts:
    1
    I have several ports related to DCOM which are
    listening. Ports 1025, 1026, 1027, 1029 particularly. I have ran Steve Gibson's DCOM tool to disable DCOM and I also changed the
    HKEY_LOCAL_MACHINE\Software\Microsoft\OLE registry entry. Neither stop these ports from listening. Im an XP Home user. Any assistance in
    helping to stop these listening ports would be appreciated.

    Here is a part of my openports log

    SYSTEM [4]
    TCP 0.0.0.0:1025 0.0.0.0:0 LISTENING
    svchost.exe [756]
    UDP 0.0.0.0:1029 0.0.0.0:0 LISTENING
    UDP 0.0.0.0:1026 0.0.0.0:0 LISTENING
    Explorer.EXE [876]
    UDP 127.0.0.1:1027 0.0.0.0:0 LISTENING
     
  2. spy1

    spy1 Registered Member

    Joined:
    Dec 29, 2002
    Posts:
    3,139
    Location:
    Clover, SC
    The only entry that gives me any concern is the last one:

    Explorer.EXE [876]
    UDP 127.0.0.1:1027 0.0.0.0:0 LISTENING

    and that's only because (a) I don't have that one listening on mine (even with IE running) and (b) because TDS's "Port Reference" gives the following info for 1027:

    15:41:04 [PortRef] 1027: RAT: Latinus, FTS

    (this may or may not mean anything, as it could be listening for some completely valid reason that has nothing to do with the above).

    I'm sure someone a whole lot smarter will be along shortly to help.

    Doesn't OpenPorts tell you which process is using the port, like Port Explorer does? Pete
     
  3. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
Thread Status:
Not open for further replies.