Windows Services Detected

Discussion in 'other firewalls' started by EV700, Aug 19, 2007.

Thread Status:
Not open for further replies.
  1. EV700

    EV700 Registered Member

    Joined:
    Aug 19, 2007
    Posts:
    4
    I ran a tool called SuperScan 4.0 on my external IP address and it was able to retrieve a list of my Windows XP services and their current running states. How can this be prevented?
     
  2. Gen

    Gen Registered Member

    Joined:
    Jan 9, 2007
    Posts:
    73
    Do you have any kind of Firewall ?
     
  3. EV700

    EV700 Registered Member

    Joined:
    Aug 19, 2007
    Posts:
    4
    Yeah, that scan was on my external IP so it should have hit my router.. I can't imagine how it could have went through my router... then it'd had to go through Comodo. But, it happened... because it sure did list my services.

    Isn't there something I can disable to prevent that, even if I didn't have a firewall?
     
    Last edited: Aug 19, 2007
  4. Kerodo

    Kerodo Registered Member

    Joined:
    Oct 5, 2004
    Posts:
    7,779
    Something seems rather fishy to me.. ;)
     
  5. Stem

    Stem Firewall Expert

    Joined:
    Oct 5, 2005
    Posts:
    4,948
    Location:
    UK
    Can you confirm that you used an external PC to make the scans (outside of the router/LAN). If you made the scans using your PC against your own external (router IP) then the results will be unpredictable.

    {Superscan is really quite old, and performs simple ICMP for host detection, and then mainly uses UDP against service ports for ICMP replies.}
     
  6. Gen

    Gen Registered Member

    Joined:
    Jan 9, 2007
    Posts:
    73
    Yes as Stem said, check if the scan was done by an external pc then report back.

    If it is the case, then something is not right. Could be a wrongly configured firewall, trojan opening specific ports, application that might open those ports etc etc
     
  7. EV700

    EV700 Registered Member

    Joined:
    Aug 19, 2007
    Posts:
    4
    I did it from my LAN using the external IP address of my router/modem.
     
  8. Gen

    Gen Registered Member

    Joined:
    Jan 9, 2007
    Posts:
    73
    This might be the cause then.
    If you have access to an external pc not part of your LAN/router etc, it would be interesting to do the scan again and see if you can still see the services running.
     
  9. Stem

    Stem Firewall Expert

    Joined:
    Oct 5, 2005
    Posts:
    4,948
    Location:
    UK
    It will not give correct results with this method. (your firewall/router will allow the outbound then can allow the replies to a scan)

    You would either have to use a second PC on the LAN and scan the internal (LAN) IP of the PC, or use a PC outside of the LAN/router to scan your WAN IP.
     
Loading...
Thread Status:
Not open for further replies.