microsoft-ds

  • Thread starter Thread starter Mike-b
  • Start date Start date
M

Mike-b

I'm running W2K server and noticed a weird port through netstat. I
have the following:
Proto - TCP
Local Address - Servername:microsoft-ds
Foreign Address - www.clin-sci.com:2307
State - Established

Can anyone help me out here. We are not running a proxy and there
would be no reason for this connection. It looks to me as though
someone is in my machine. I'm not having much luck with specifics on
microsoft-ds.

thanks,
Mike-b
 
That is it port 445. Try netstat -an. Port 445 is Microsoft
Directory Services and should NEVER be exposed to the internet at large. If
you are not sharing files or printers on a lan you should disable file and
print sharing ASAP. You also need a firewall - there are excellent free ones
available for personal use - Zone Alarm is good for beginners.. Go to
http://scan.sygatetech.com/ to do a basic vulnerability test on your
computer. You should also scan for viruses and trojans. -- Steve

http://www.webattack.com/Freeware/security/fwfirewall.shtml
 
Back
Top