Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My fresh install of Windows 7 shows 5 programs listening on TCP ephermeral ports:

 TCP    0.0.0.0:49152          0.0.0.0:0              LISTENING
 TCP    0.0.0.0:49153          0.0.0.0:0              LISTENING
 TCP    0.0.0.0:49154          0.0.0.0:0              LISTENING
 TCP    0.0.0.0:49155          0.0.0.0:0              LISTENING
 TCP    0.0.0.0:49157          0.0.0.0:0              LISTENING

netstat -ano shows that one of the processes is wininit.exe.

Why is wininit.exe listening for TCP traffic and how do I prevent it? (I don't want to have to firewall it).

share|improve this question
add comment

2 Answers 2

Ports 135, 49152, 49153, 49154, 49155, 49156, & 49157 are all associated with MSRPC. You may want to try to turn it off in Services list.

share|improve this answer
1  
No go. You can't disable RPC without trashing windows. Under Win2k3 these processes did not open TCP ports. I'd like to disable them or bind them to the loopback address. Anyone else have an answer? –  Anonymous Dec 21 '09 at 20:59
    
If there's no way to disable it then i believe Microsoft has reasons for this. Maybe, they know better? ;) –  kolypto Dec 22 '09 at 6:38
1  
It wasn't like this in previous versions of Windows. I'd like to know why it is like this now. –  Anonymous Dec 22 '09 at 15:27
add comment

I had a local firewall installed, and through it saw a lot of strange ports open connected to a svchost.exe instance. Disabling the IP Helper service got rid of them.

share|improve this answer
    
That answer is far too generic (and completely inapplicable to the specific ports in question anyway). –  Synetech Feb 23 '12 at 1:38
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.