Globally Open Ports - Spyware?

[Guest]

I have a small office with multiple computers running Windows Defender. Over
the last few weeks, at different times on different computers, I am seeing a
Firewall port exception being generated for which I am unable to block. My
fear is that someone is attempting to hack my computers through my Windows XP
network. If it's a Microsoft product hacking itself without letting me know
it is a "valid Microsoft product," why doesn't WD know about it?

Also, how can I check to see which ports are open so I can close those that
don't need to be open...please post a link to a good "how to" article.

Windows Defender Notification:

Description:
This program has potentially unwanted behavior.

Advice:
Allow this detected item only if you trust the program or the software
publisher.

Resources:

firewallport:
HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\3276:UDP

Category:
Not Yet Classified

 

[Guest]

You will find several useful port scan links in the right hand column of the
Internet Security link below, under the heading "Useful information about
what may be bugging you". GRC.COM also offers a useful port scan.

Check your hardware firewall log for any inconsistancies. *ALL* ports
should be reported as STEALTH or BLOCKED. A closed port is still vulnerable
to attack.

 

[Guest]

Hi Scott,

Thank you for the info. I bookmarked the web pages you sent and will review
the
tools and articles when able.

I was hoping that someone else has experienced the GloballyOpenPorts issue
and
knows if it is spyware or a major thing to worry about. Anyone?

John

 

[Guest]

Didn't find malware, but does this bring anything to mind?

http://www.seifried.org/security/ports/3000/3276.html
http://www.maxim-ic.com/Wireless.cfm

Bitman