8

My fresh install of Windows 7 shows 5 programs listening on TCP ephermeral ports:

 TCP    0.0.0.0:49152          0.0.0.0:0              LISTENING
 TCP    0.0.0.0:49153          0.0.0.0:0              LISTENING
 TCP    0.0.0.0:49154          0.0.0.0:0              LISTENING
 TCP    0.0.0.0:49155          0.0.0.0:0              LISTENING
 TCP    0.0.0.0:49157          0.0.0.0:0              LISTENING

netstat -ano shows that one of the processes is wininit.exe.

Why is wininit.exe listening for TCP traffic and how do I prevent it? (I don't want to have to firewall it).

2 Answers2

4

Ports 135, 49152, 49153, 49154, 49155, 49156, & 49157 are all associated with MSRPC. You may want to try to turn it off in Services list.

kolypto
  • 11,058
  • 12
  • 54
  • 66
  • 3
    No go. You can't disable RPC without trashing windows. Under Win2k3 these processes did not open TCP ports. I'd like to disable them or bind them to the loopback address. Anyone else have an answer? –  Dec 21 '09 at 20:59
  • If there's no way to disable it then i believe Microsoft has reasons for this. Maybe, they know better? ;) – kolypto Dec 22 '09 at 06:38
  • 2
    It wasn't like this in previous versions of Windows. I'd like to know why it is like this now. –  Dec 22 '09 at 15:27
0

I had a local firewall installed, and through it saw a lot of strange ports open connected to a svchost.exe instance. Disabling the IP Helper service got rid of them.

  • 2
    That answer is far too generic (and completely inapplicable to the specific ports in question anyway). – Synetech Feb 23 '12 at 01:38