Network connections use

[Chris]

using netstat (WinXP), I see some strange connection (looks like a trojan).
Is it possible to find out which listener (exe, service, ISAPI, activeX,
....) or program did established connection?
Is there any command/tool to see all the registered (potencial) listeners?

Is there any relation between program and open socket (for all opened
sockets I would like get list of modules that established the socket
connection)

Chris

 

[Chuck]

using netstat (WinXP), I see some strange connection (looks like a trojan).
Is it possible to find out which listener (exe, service, ISAPI, activeX,
...) or program did established connection?
Is there any command/tool to see all the registered (potencial) listeners?

Is there any relation between program and open socket (for all opened
sockets I would like get list of modules that established the socket
connection)

Chris

Chris,

Get Port Explorer (free) from
<http://www.diamondcs.com.au/portexplorer/index.php?page=home> to show you what
network connections your computer is actually opening, and what processes are
opening them.
And Process Explorer (free) from
<http://www.sysinternals.com/ntw2k/freeware/procexp.shtml>. Provides way more
information than Task Manager. Also, Autoruns (also free, and also from
SysInternals) <http://www.sysinternals.com/ntw2k/freeware/autoruns.shtml> will
show you specifically what process are started automatically.

And Chris, posting your email address openly will get you more unwanted email,
than wanted email. Learn to munge your email address properly, to keep yourself
a bit safer when posting to open forums. Protect yourself and the rest of the
internet - read this article.
http://www.mailmsg.com/SPAM_munging.htm

--
Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.
My email is AT DOT
actual address pchuck sonic net.