Defender alert

[Guest]

I recently checked the history and found four alerts:

firewallport:
HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\2414:UDP

firewallport:
HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\2415:UDP

firewallport:
HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\3010:UDP

firewallport:
HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\3011:UDP

The first two on 06/27/2007 and the second two on 06/03/2007. The alert
level in Unknown, the action taken is permitted and the status is succeeded.
The description is the program has potentially unwanted behavior, and the
category is not yet classified.

I checked the internet and some sites believe the alert to be from a normal
system function and some sites believe it to be from a trojan, etc. I have
not noticed any issues with the system running slow, unwanted pop-ups, funny
websites, etc. However, as I wrote this email the first time, MSN experienced
a program and shut me down. I also ran Nortons Anti-virus, SPybot, and I ran
the WIndows Malicious Software Removal Tool, all with negative results.
A buddy gave me a program to check whether any software is running behind
the scenes and sending information out, "TCPVIEW", also with negative
results. Any advice, suggestions, or information on whether or not I may have
a problem, virus, etc. is greatly appreciated. Thanks.

 

[Guest]

Hello Jones,

Some application you ran--not a malicious one--opened a port in the Windows
Firewall. You don't need to worry about it, most likely. Chances are the
application removed the port exception when it exited.



I hope this post is helpful.

Let us know how it works ºut.

Еиçεl

 

[Guest]

Hi Jones

Engel`s comments (as always) is good but I`m left wondering why you were not
warned of any communication (in or out) with your computer. Unless, you are
only using a Windows XP firewall. If, on the otherhand, you are using a good
third party firewall such as ZA, you would receive a warning regarding any
application attempting to communicate with both the outside world (both ways)
and Windows internals, together with a comprehensive log file.

Stu

 

[Guest]

Squawking standby ................

Stu

Hello Jones,

Some application you ran--not a malicious one--opened a port in the Windows
Firewall. You don't need to worry about it, most likely. Chances are the
application removed the port exception when it exited.



I hope this post is helpful.

Let us know how it works ºut.

Еиçεl
--


HAPPINES
The long days are no happier than the short ones. -----Philip J. Bailey

 

[Bill Sanderson MVP]

A bit late, I'll agree with Engel--this is nothing to worry about.

I believe that if you open these entries, there should be information about
what application is opening the ports. You can ask Defender to show you
these at the time they happen, via options checkboxes,. but I would
recommend that most folks not do this--the alerts are more likely to confuse
than enlighten.