SP2 and Port 135

[Rob]

Installed SP2 on one of my PCs as a test:
Before and after the update, I ran a security check (from
the web site of a major anti-virus software company) and
found that BEFORE the update, I was clean, but afterwards,
something called Port 135 (location service?) had been
left open.
I was (in their opinion) vulnerable to attack, even with
their firewall (and microsoft's new improved firewall)
running.

Is this by design? If so, how does this benefit me?

 

[Quaoar]

Installed SP2 on one of my PCs as a test:
Before and after the update, I ran a security check (from
the web site of a major anti-virus software company) and
found that BEFORE the update, I was clean, but afterwards,
something called Port 135 (location service?) had been
left open.
I was (in their opinion) vulnerable to attack, even with
their firewall (and microsoft's new improved firewall)
running.

Is this by design? If so, how does this benefit me?

Check that the Messenger Service (Control Panel, Administrative Tools,
Services) is Disabled. It uses Port 135 for broadcast. Port 135 is
also used for blaster worm propagation, but SP2 is supposed to be fixed
to prevent it. UDP port 135 is used for several network services also.
You can close the port in TCP/IP properties for the connection, General
tab, Advanced button, Options tab, TCP/IP filtering properties. See if
you have any communication problems.

Q

 

[Rob]

Messenger Service?
Is this the "Messenger" (internal) or the "windows
messenger" (that I don't want!)

Thanks.....

 

[Quaoar]

Messenger Service?
Is this the "Messenger" (internal) or the "windows
messenger" (that I don't want!)

Thanks.....

Messenger Service, not Windows Messenger. Google: remove Windows
Messenger for a procedure to remove it also.

Q

 

[Torgeir Bakken \(MVP\)]

Installed SP2 on one of my PCs as a test:
Before and after the update, I ran a security check (from
the web site of a major anti-virus software company) and
found that BEFORE the update, I was clean, but afterwards,
something called Port 135 (location service?) had been
left open.
I was (in their opinion) vulnerable to attack, even with
their firewall (and microsoft's new improved firewall)
running.

Is this by design? If so, how does this benefit me?

Hi

Check what firewall exceptions is enabled in the FW configuration.
If e.g. the File & Print Sharing exception is enabled, port 135
will be open.