Anti-Spyware Forums


Reply
Thread Tools Display Modes

Port 1033 (netinfo) port is open - what's it for and how do I close it

 
 
Neil Armstrong
Guest
Posts: n/a

 
      17-09-2003, 05:06 PM
I've run Shields up (www.grc.com) to test a clients new Wingate Pro firewall
on Win2000 server sp4.
Ideally I'd like all ports to be in full stealth mode.

The problem is that I'm seeing Port 1033 which I'm told is local netinfo
port open.

Now I know what you're thinking 'netspy' - but I don't think so.

Norton AV with latest definitions doesn't see it and neither does Mcafee's
excellent online scan.

I can't see what process might be using this port or what it's using it for.
I'm downloading fport and I'll try that the next time I'm onsite - but I was
hoping one of you kind folk would have an idea.

Hopefully,

Neil
(E-Mail Removed)
Ireland


 
Reply With Quote
 
 
 
 
Tim H.
Guest
Posts: n/a

 
      17-09-2003, 06:29 PM

"Neil Armstrong" <(E-Mail Removed)> wrote in message
news:uq%(E-Mail Removed)...
> I've run Shields up (www.grc.com) to test a clients new Wingate Pro

firewall
> on Win2000 server sp4.
> Ideally I'd like all ports to be in full stealth mode.
>
> The problem is that I'm seeing Port 1033 which I'm told is local netinfo
> port open.
>
> Now I know what you're thinking 'netspy' - but I don't think so.
>
> Norton AV with latest definitions doesn't see it and neither does Mcafee's
> excellent online scan.
>
> I can't see what process might be using this port or what it's using it

for.
> I'm downloading fport and I'll try that the next time I'm onsite - but I

was
> hoping one of you kind folk would have an idea.


One excellent (and free) program you can download to see which programs are
bound to which ports is TCPView by Sysinternals:

http://www.sysinternals.com/ntw2k/source/tcpview.shtml

That should tell what's listening on 1033 (can you telnet to it?). May just
be another of Microsoft's useful services.

-Tim


>
> Hopefully,
>
> Neil
> (E-Mail Removed)
> Ireland
>
>



 
Reply With Quote
 
 
 
 
Mimic
Guest
Posts: n/a

 
      18-09-2003, 12:14 PM
"Neil Armstrong" <(E-Mail Removed)> wrote in message
news:uq#(E-Mail Removed)...
> I've run Shields up (www.grc.com) to test a clients new Wingate Pro

firewall
> on Win2000 server sp4.
> Ideally I'd like all ports to be in full stealth mode.
>
> The problem is that I'm seeing Port 1033 which I'm told is local netinfo
> port open.
>
> Now I know what you're thinking 'netspy' - but I don't think so.
>
> Norton AV with latest definitions doesn't see it and neither does Mcafee's
> excellent online scan.
>
> I can't see what process might be using this port or what it's using it

for.
> I'm downloading fport and I'll try that the next time I'm onsite - but I

was
> hoping one of you kind folk would have an idea.
>
> Hopefully,
>
> Neil
> (E-Mail Removed)
> Ireland
>
>


I havent actually used 2K myself but its basis are similar to XP, you might
find this will help (from the console):

netstat -ano

tasklist /svc -fi "pid eq XXX"

where XXX is the pid of the process of port 1033 that you should get from
the netstat.

--
Mimic

"Without Knowledge you have fear, With fear you create your own nightmares."
"There are 10 types of people in this world. Those that understand Binary,
and those that dont."
"C makes it easy to shoot yourself in the foot. C++ makes it harder, but
when you do, it blows away your whole leg"



 
Reply With Quote
 
Bill Sanderson
Guest
Posts: n/a

 
      18-09-2003, 01:22 PM
On an XP machine running IIS, this is what I get:


Image Name PID Services
========================= ======
=============================================
inetinfo.exe 1924 IISADMIN, W3SVC


"Mimic" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> "Neil Armstrong" <(E-Mail Removed)> wrote in message
> news:uq#(E-Mail Removed)...
> > I've run Shields up (www.grc.com) to test a clients new Wingate Pro

> firewall
> > on Win2000 server sp4.
> > Ideally I'd like all ports to be in full stealth mode.
> >
> > The problem is that I'm seeing Port 1033 which I'm told is local netinfo
> > port open.
> >
> > Now I know what you're thinking 'netspy' - but I don't think so.
> >
> > Norton AV with latest definitions doesn't see it and neither does

Mcafee's
> > excellent online scan.
> >
> > I can't see what process might be using this port or what it's using it

> for.
> > I'm downloading fport and I'll try that the next time I'm onsite - but I

> was
> > hoping one of you kind folk would have an idea.
> >
> > Hopefully,
> >
> > Neil
> > (E-Mail Removed)
> > Ireland
> >
> >

>
> I havent actually used 2K myself but its basis are similar to XP, you

might
> find this will help (from the console):
>
> netstat -ano
>
> tasklist /svc -fi "pid eq XXX"
>
> where XXX is the pid of the process of port 1033 that you should get from
> the netstat.
>
> --
> Mimic
>
> "Without Knowledge you have fear, With fear you create your own

nightmares."
> "There are 10 types of people in this world. Those that understand Binary,
> and those that dont."
> "C makes it easy to shoot yourself in the foot. C++ makes it harder, but
> when you do, it blows away your whole leg"
>
>
>



 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
how can i close an open port ? yousef Security Software 3 28-11-2003 12:48 PM
how to close open ports? ak Security Software 5 06-10-2003 03:41 AM
Port 1033 (netinfo) port is open - what's it for and how do I close it Neil Armstrong Anti-Virus 3 18-09-2003 01:22 PM
Port 1033 (netinfo) port is open - what's it for and how do I close it Neil Armstrong Security Software 0 17-09-2003 05:07 PM
how to close open port? Rob Johnson Security Software 1 17-08-2003 12:10 AM


All times are GMT. The time now is 09:18 PM.