Ports 68 and 80 are opened.. don't know why or how to close

and it acts as a server... but that port has never shown up as open before.

to Port 80 and 68

Open Command Prompt and type:

netstat -no

you'll see the PID (process ID)
Take note of the PID then pulist it to find out which of your application/processes/service is using Port 80 and Port 68 that causes it as "open"

Example:
pulist \find /i "1234"

Not: 1234 is the PID

I dont know how to decipher what I am looking at.

I do get a list but I can't tell which is what-- can't tell what is even port 80-related here.

A little more detail is needed. I'm not that technically savvy.

Thanx

Open Command Prompt and type:

netstat -no
Hit Enter in your keyboard

or

netstat -ano
Hit Enter in your keyboard

you'll see the PID (process ID)
Take note of Process ID where you will see Port 68 or Port 80 is in used (listening) (make sure no browser or windows is open before you do the above)

Next, Open Task Manager (Press Ctrl+Alt+Del)
Click View>Select Columns
Check the box before PID (process identifier)

You can now check what processes or application is using Port 68 or 80 by looking up the PID against the Processes Tab of Task Manager.

How can I tell what is being used on Port 80 after typing netstat -no? I see the list of things but nothing is identifying (to my eyes) which is being used on port 80 so I have no idea what to look for, period.

Sorry I am so thick here. Your patience appreciated.

How can I tell what is being used on Port 80 after typing netstat -no? I see the list of things but nothing is identifying (to my eyes) which is being used on port 80 so I have no idea what to look for, period.

Sorry I am so thick here. Your patience appreciated.

After entering netstat -ano or netstat -no, you will see something like this:

Active Connections

Proto Local Address Foreign Address State PID
TCP 0.0.0.0:135 0.0.0.0 LISTENING
TCP 0.0.0.0:445 0.0.0.0 LISTENING
TCP 127.0.0.1:1025 0.0.0.0 LISTENING 1616
TCP 127.0.0.1:80 0.0.0.0 LISTENING 1234

In the above example, 1025 and 80 are the port numbers that is listening. The Process ID in used by 1025 is 1616 while Port 80 is in used by Process ID 1234.

Now, look in your Process Tab (after you checked the box before PID in the Column), lookup for PID 1234 to find out the image name (processes name) that is using PID 1234. That allows you to determine which application or services is using your Port 68 and Port 80.

While Firefox is closed those ports or any of those ports are in used by it?

Actually port 68 just shows as "closed" and not "stealth" on GRC.

Also, I've run 2 other port scans besides GRC. Port 80 doesn't show at all on one and shows as open but not probable at another. FWIW.

Also, I did 5 different trojan scans (since port 80 is the favorite port for trojans to open) and all five came up clear. In anticipation of what is coming next:))

Open ZA, then open the "Program Control" tab on the left, then the "Programs" tab at the top. ONce there, find the Firefox listing, left click on the "Server" options that have been allow, choose "Block" which will put a red X in the box..Both the "Access" options for "Trusted" and "Internet" should be "Allowed" with a green check mark but the Server options are not needed for browsers.

The port 80 issue could very well be caused by the "Server" setting you've enabled. Hopefully, blocking that will fix the issue.

Hope this helps.

Grif

And port 80 was still open.

Checked the PID again and it showed ypager (yahoo messenger) using port 80. So, I erased Yahoo Messenger thinking that would close it.

But GRC still shows port 80 open. When I run netstat it shows no programs associated with the port being open. As I understand it, a port only opens to allow a program(s) access to the net. If there is no program using that port then it isn't "open".

I understand that port 80 is "the" port for http etc. But it always showed stealth before this (I repeat I ran 2 test besides GRC and one showed nothing and one showed "low risk" so I'm not sure how "open" it is).

Ideas please,

Craig