Ports by defaults are not open or closed they just sit there being ready to
be used by an application that needs them.
One of the roll of a Firewall is to keep ports closed for traffic unless one
of the application that you are using requesting a port for its own use,
therefore it is a very good idea to use Firewall.
The email that you received is a little odd, unless a Trojan is capable to
transmit your email address it is unlikely that he can infer you email
address from an IP number. In otherworld, it might be a “prank” email.
Basic Protection for Broadband Internet connection should consist of.
1. Router's NAT Firewall (even if you have only one computer).
2. Software Firewall (Why? See here,
http://www.ezlan.net/firewall.html ).
3. Antivirus Program.
4. AntiSpy Program.
A good security suit can be assembled by using very good Free programs,
http://www.ezlan.net/security.html
Microsoft is currently Beta testing a comprehensive One Care program that
might be a good substitute to the software that is mentioned above.
http://beta.windowsonecare.com/Betaentry.aspx
If you are already infected this might help,
Internet Infestation:
http://www.ezlan.net/infestation.html
Basic Steps in cleaning Internet "Junk" -
http://www.ezlan.net/clean.html
Jack (MVP-Networking).
"networm" <networm8848@yahoo.com> wrote in message
news:erGbQ4u9FHA.3132@TK2MSFTNGP12.phx.gbl...
> Hi all,
>
> Somebody remotely in another part of the world sent me email complaining I
> have a "backdoor-g-1" trojan connecting to his computer. using port
1243...
> I've also run Norton Security check from their website and found the
> following port open along with the 1243 port...
>
> > > PORT STATE SERVICE
> > > 80/tcp open http
> > > 443/tcp open https
>
> Since Norton Antivirus and Norton Security Check did not find any virus...
> or anything else. Perhaps there is nothing I can do and I can just close
the
> ports...
>
> Suspciously, these ports should not open...
>
> Now what shall I do? And how can I close the ports on XP sp2?
>
> Thanks a lot!
>
>