Traffic on MyMachine:microsoft-ds

[Ladyluck]

I recently noticed some unexplained traffic on "Local address" MyMachine:microsoft-ds using netstat -p TCP

The foreign address was a "server" ip nr. in germany (.de:1648 ESTABLISHED)

Being a novice I´m not to sure what to read into this: is it a homephoning tendency in MS-XP or a hostile attempt to log on to my XP. I am located quite a ways away from .de

I have done some gooogling to no avail

 

[Beer4meok]

I am not sure how you are conected to the internet,or if you are on a network. Need more info

Try Zone Alarm


You can find some free personal firewalls at:

http://www.webattack.com/freeware/security/fwfirewall.shtml

Please let us know if the advice we give is of some help.
Feedback will benefit all
Dave

 

[bcastner]

Download SpyBot and run it.

http://security.kolla.de/

 

[Ladyluck]

I have a XP on a LAN consisting of 5 windows/linux boxes a cisco router/switch and an HPUX server.

In cmd line running "netstat - p TCP" gave
Proto Local Address Foreign Address State

Proto TCP
Local Address MM:microsoft-ds
Foreign Address port-ip-nr-in-germany:1648
State Established

with a bit more googling I found microsoft-ds is a service (what does it do?)on port 445 (

http://isc.incidents.org/port_details.html?port=445

)that may be subject to DOS attacks and I´m now wondering how to close it.