How do I close msrpc ports?



Hi All,

How do I close MSRPC (remote proceedure call) ports?

Many thanks,

Kaspersky End Point Security on Windows 7:

# nmap --reason

Starting Nmap 6.25 ( ) at 2013-09-16 19:42 PDT
Nmap scan report for (
Host is up, received arp-response (0.00044s latency).
Not shown: 989 closed ports
Reason: 989 resets

135/tcp open msrpc syn-ack
139/tcp open netbios-ssn syn-ack
445/tcp open microsoft-ds syn-ack
1110/tcp filtered nfsd-status no-response
5357/tcp open wsdapi syn-ack
49152/tcp open unknown syn-ack
49153/tcp open unknown syn-ack
49154/tcp open unknown syn-ack
49155/tcp open unknown syn-ack
49156/tcp open unknown syn-ack
49157/tcp open unknown syn-ack

The high ports are msrps ports:


Port Serv Process name
49152, msrpc [wininit.exe]
49153, msrpc [svchost.exe, Eventlog]
49154, msrpc [svchost.exe, Schedule]
49155, msrpc [lsass.exe]
49157, msrpc [services.exe]
49159, msrpc [svchost.exe, PolicyAgent]

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question