tasklist /svc doesn't work for me on XP! to aid in Trojan identification

  • Thread starter Thread starter Mike N
  • Start date Start date
M

Mike N

***THANKS IN ADVANCE FOR YOUR HELP***

I have been trying for months to find a way to identify
EXACTLY WHICH Ports are open on my PC at any given time,
AND also WHICH Programs are opening/creating those ports
(to aid me in identifying Trojans, Viruses, etc).

I recently found out that going to Start/Run/typing cmd,
then tasklist /svc will give me a list of applications,
PIDs and Services. From that I can match up the PID with
the service to know what process on a computer is
connecting to which ports. IS THIS CORRECT?

PROBLEM: I have XP Home and going to: Start/Run & then
typing cmd, then typing: tasklist /svc gives me an
error: Tasklist is not recognized as an internal or
external command. This is aggrivating. Can someone
please tell me why it won't work? One article told me
this was a function of XP Pro only and XP Home users
needed to download XP Powertoys, which includes tasklist
functionality. I did all this and nothing works! (yes i
rebooted). GRRR.

Is this the best way for me to reach my goal of:
identifying EXACTLY WHICH Ports are open on my PC at any
given time, AND also WHICH Programs are opening/creating
those ports (to aid me in identifying Trojans, Viruses,
etc)?

THANKS IN ADVANCE FOR YOUR HELP
 
Ok, I unzipped the file to C:\WINDOWS\system32. I then
tried to run the command from a prompt: tasklist /svc,
nothing happened, except invalid....

I thought, well he did say to copy, so i thought "i'll
unzip the fileS to a folder on my desktop, then copy them
manually into the C:\WINDOWS\system32 folder". Well I
unzipped it and now there is 11 files that appeared and
one folder with another 4 files in it! So COPY WHAT? I
guess I'm ignorant, since you didn't give any details, I
guess everyone knows how to do this. Am I the only one
who doesn't know what to do with all this and how to make
it work after using computers 20 years? Gee I hope not.
Soooooooo EXACTLY which File/files do i copy and EXACTLY
where to and what's the process to do it? (I know
copy/paste, but not allot past that when it comes to
doing this type thing).

OH, and now what do i do with the files from this
downloaded zip file now in my Windows/system32 folder?
Do I go find them and manually delete them one by one?

Thanks for the help.
 
See www.dougknox.com, Win XP Utilities, Startup Programs Tracker. This
small utility scans your system for startup programs and running processes.
It also allows you to create a log file that can be copied and pasted into a
newsgroup post. The contents of the program window are also copied to the
Windows Clipboard, automatically.

--
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
 
Open command prompt and type netstat -ano and see if that works. You
can use that to match up the pid process with the processes shown in
task manager. Hope this helps.
 
Back
Top