http://www.bootdisk.com/html.htm
I am surprised that ZoneAlarm does not show more info about the application.
Double click the ZoneAlarm icon in the Notification area.
Click on Program control.
You can click on entry in the table and see MORE info below in the Entry
Detail.
Tip For more information about a program, click the program name, then look
in the Entry Details box at the bottom of the screen.
port 1128
saphostctrl 1128/tcp SAPHostControl over SOAP/HTTP
saphostctrl 1128/udp SAPHostControl over SOAP/HTTP
Not all warnings are problems related to hackers. Sometimes your computer
doesn't disconnect from a server properly while you are surfing and you
might get a message but that's not a problem. What is a problem is when a
hacker is probing other ports like port 1128 - your browser uses ports 80,
81 or 8080, e-mail software usually uses port 25.
http://www.thiefware.com/zone.alarm.shtml
netstat.exe displays protocol statistics and current TCP/IP network
connections.
process identifier (PID)
[[A numerical identifier that uniquely distinguishes a process while it
runs. Use Task Manager to view PIDs.]]
Open a command prompt...
Start | Run | Type: cmd | Click OK |
Type: netstat -ano and hit ENTER
Under Local Address, look for the numbers after the colon
), that's the
port number.
If you see 1128 listed, look at the corresponding number in the PID column.
You can match up the PID # in Task Manager to find the process that is using
the port.
Open the Task Manager, Ctrl + Shift + Esc.
Click on the Processes tab.
Click the PID column header to sort the PID #s in order.
Example....
-------------
C:\>netstat -ano
Active Connections
Proto Local Address Foreign Address State PID
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4
TCP 0.0.0.0:2963 0.0.0.0:0 LISTENING 1636
TCP 24.9.206.13:2963 207.46.248.16:119 ESTABLISHED 1636
TCP 24.9.206.13:2971 216.148.227.80:110 TIME_WAIT 0
TCP 24.9.206.13:2972 65.17.220.40:110 TIME_WAIT 0
UDP 0.0.0.0:445 *:* 4
UDP 127.0.0.1:2760 *:* 1636
-------------
In the example above PID 1636 is msimn.exe (Outlook Express).
PID numbers change every time that you reboot and are different on every
machine.
You can type in a command prompt: netstat /? for help.
UPDATE your antivirus software and run a full system scan.
UPDATE whatever anti-spyware applications that you have and run a full
system scan with each one.
You might want to start in Safe Mode to run your antivirus and anti-spyware
software.
Running a full system antivirus scan or anti-spyware scan in Safe Mode can
be a good idea. Some viruses and other malware like to conceal themselves
in areas Windows protects while using them. Safe mode will prevent those
applications access and therefore unprotect the viruses or other malware
allowing for easier removal.
How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In
