Many believe (and I agree) that the only sure way to check for open ports is from outside the machine.
Http://www.grc.com does just that.
Okay, he's changed the site a lot. The actual test is at
https://grc.com/x/ne.dll?bh0bkyd2. He calls it "Shields Up".
GRC is an excellent security resource!
Have the site "Check Your Shields" and "Probe Your Ports" for open ports. Mind you, if you have certain software running (chat, mail or ftp client) some of your ports may be open. You should close all your programs first.
I have seen some websites (even one well-known virus/protection/tools/ manufacturer) download an applet to check your ports. This can give misleading results. GRC may suggest you download a small program, but it's really just to give the website the proper IP through a proxy of firewall.
Also, there's no need for any protocol besides TCP in your networking (unless you use IPX for gaming). Don't mess too much with it if you're not sure of what you're doing, but if you do know, and you see NetBEUI in there, get it out. Another way is to just release the bindings to NetBEUI and it'll drop on its own. Also, make sure you have file and printer sharing disabled.
A good trick - just another defense in your line against hackers, if you are on a network, is:
Make a folder. Right-click it and share it as "C". There's never any reason to share your whole C drive. Not a good idea! So, your "C" alias will look like your C drive to a potential hacker. You can even put 'bait' in there, like the standard folders in a C drive, and even put text files in there, giving them names that the normal files there would have. You would only want to do this if you're on a network! Of course, there should always be a firewall, but it is added protection. Every little bit helps.
[ November 14, 2001: Message edited by: TWebMan ]