Thread: 2k netbios

    #1
  1. No Profile Picture
    Junior Member
    Devshed Newbie (0 - 499 posts)

    Join Date
    Dec 2001
    Posts
    4
    Rep Power
    0

    2k netbios


    can anyone tell me why a program on my system is trying to access my netbios port 137/138..
    and how can I monitor it?????? or control it....

    Thanx
  2. #2
  3. Contributing User
    Devshed Intermediate (1500 - 1999 posts)

    Join Date
    Oct 2001
    Location
    New Zealand
    Posts
    1,774
    Rep Power
    25
    In windows NT and 2000 it's Microsoft SMB software that is accessing the ports. This allows for network print/file sharing through client software such as Samba. The problem is that it also allows access through Trojans to your file system. It's very easy to use these ports for outside access. So the best thing to do is close the ports off then see if there's any adverse affect, if not you're okay. Try a firewall such as ZoneAlarm to stop any in/out access.

    If you want to monitor things have a look at:

    http://www.commodon.com/threat/threat-detect.htm

IMN logo majestic logo threadwatch logo seochat tools logo