TCP.80 is accessible

Waff · 11-11-2007, 02:02 PM

From HouseCall :

Detected vulnerabilities / security risks 1 Detected

Malware exploiting this port: Back End, Executor, Hooker, RingZero

The HyperText Transfer Protocol (HTTP) forms the basis for webpage transfer over the web. If open, the outer internet can view your published webpages. In the past lots of worm and virues (e.g Nimda) used this service for spreading. Especially the Microsoft Internet Information Server (IIS) was effected. If you provide internal information only, in your intranet, then close this port. However make sure that you have installed the latest available patches!

what can I do? how to close the port , impt port?

Waff · 11-20-2007, 03:30 AM

someone help?

**ceewi1** · 11-20-2007, 06:56 AM

Such intrusions should be blocked by a firewall. Do you have one? If not, I suggest downloading a free version of one of the following: ZoneAlarm, Kerio, or Outpost

Waff · 11-22-2007, 03:56 AM

how to block this port with ZoneAlarm free version? I have zonealarm but I still got this vulnerability

**ceewi1** · 11-22-2007, 08:03 AM

Open up Zone Alarm and go to the Firewall Tab. Make sure that Internet Zone Security is set to High.

Try running a port scan at http://www.pcflank.com/scanner1.htm (keep the default options) - it will show you which common ports are open.

Waff · 11-23-2007, 03:39 AM

The test has found that the IP address used by your computer cannot be scanned. This commonly occurs because of a firewall program on your computer and/or you are connected to the Internet through a proxy-server or your ISP uses Network Address Translation (NAT) to share IP addresses.

This means the test cannot check your system as the results of the testing would be incorrect.

now what?

I see the ZA has an advanced settings at the security level section .

Should I check the 'allow outgoing DNS/DHCP in Trusted Zone on High Setting' and allow outgoing DNS/DHCP in Internet Zone on high setting'?

11-11-2007, 02:02 PM	#1 (permalink)
Waff Bronze Member Join Date: Mar 2007 Posts: 72	How to block TCP 80? From HouseCall : Detected vulnerabilities / security risks 1 Detected Malware exploiting this port: Back End, Executor, Hooker, RingZero The HyperText Transfer Protocol (HTTP) forms the basis for webpage transfer over the web. If open, the outer internet can view your published webpages. In the past lots of worm and virues (e.g Nimda) used this service for spreading. Especially the Microsoft Internet Information Server (IIS) was effected. If you provide internal information only, in your intranet, then close this port. However make sure that you have installed the latest available patches! what can I do? how to close the port , impt port? Last edited by Waff; 11-25-2007 at 05:52 AM.

11-20-2007, 06:56 AM	#3 (permalink)
ceewi1 Moderator Join Date: Dec 2005 Location: Melbourne, Australia Age: 21 Posts: 5,214	Such intrusions should be blocked by a firewall. Do you have one? If not, I suggest downloading a free version of one of the following: ZoneAlarm, Kerio, or Outpost __________________ CPU: Core 2 Duo E6600 / MOBO: Gigabyte 965P-DS3 / GPU: Gigabyte HD4870 RAM: 2GB G.Skill F2-6400CL4D-2GBPK / HDD: 2TB Total HDD / PSU: Antec NeoPower 480W Cheap PSUs - 2% of system costs, responsible for 28% of system deaths As Sealed Stick was removed, lost or damaged, it shall be out of warranty validity. - The "Warranty void if removed" sticker on numerous CoolerMaster PSUs. Useful PSU Guides

11-22-2007, 08:03 AM	#5 (permalink)
ceewi1 Moderator Join Date: Dec 2005 Location: Melbourne, Australia Age: 21 Posts: 5,214	Open up Zone Alarm and go to the Firewall Tab. Make sure that Internet Zone Security is set to High. Try running a port scan at http://www.pcflank.com/scanner1.htm (keep the default options) - it will show you which common ports are open. __________________ CPU: Core 2 Duo E6600 / MOBO: Gigabyte 965P-DS3 / GPU: Gigabyte HD4870 RAM: 2GB G.Skill F2-6400CL4D-2GBPK / HDD: 2TB Total HDD / PSU: Antec NeoPower 480W Cheap PSUs - 2% of system costs, responsible for 28% of system deaths As Sealed Stick was removed, lost or damaged, it shall be out of warranty validity. - The "Warranty void if removed" sticker on numerous CoolerMaster PSUs. Useful PSU Guides

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
HDD not accessible! Access denied!	Ignorantguy	Computer Memory and Hard Drives	7	08-20-2006 12:00 AM
Program Files 'not accessible' on slave drive	lazyturbo	General Software	4	05-17-2006 05:34 PM
J:\ is not accessible. the request could not be preformed because of an I/O device er	skateforjondoe	Computer Memory and Hard Drives	8	01-19-2006 08:43 PM
D:\ Not Accessible	SAAER45	CD/DVD Technology	7	09-05-2005 04:24 AM
Drive not accessible?!?!	ginger-flash	CD/DVD Technology	14	03-30-2005 07:20 PM

11-20-2007, 03:30 AM	#2 (permalink)
Waff Bronze Member Join Date: Mar 2007 Posts: 72	someone help?

11-22-2007, 03:56 AM	#4 (permalink)
Waff Bronze Member Join Date: Mar 2007 Posts: 72	how to block this port with ZoneAlarm free version? I have zonealarm but I still got this vulnerability

11-23-2007, 03:39 AM	#6 (permalink)
Waff Bronze Member Join Date: Mar 2007 Posts: 72	The test has found that the IP address used by your computer cannot be scanned. This commonly occurs because of a firewall program on your computer and/or you are connected to the Internet through a proxy-server or your ISP uses Network Address Translation (NAT) to share IP addresses. This means the test cannot check your system as the results of the testing would be incorrect. now what? I see the ZA has an advanced settings at the security level section . Should I check the 'allow outgoing DNS/DHCP in Trusted Zone on High Setting' and allow outgoing DNS/DHCP in Internet Zone on high setting'?