tasklist /svc doesn't work for me on XP! to aid in Trojan identification

[Mike N]

***THANKS IN ADVANCE FOR YOUR HELP***

I have been trying for months to find a way to identify
EXACTLY WHICH Ports are open on my PC at any given time,
AND also WHICH Programs are opening/creating those ports
(to aid me in identifying Trojans, Viruses, etc).

I recently found out that going to Start/Run/typing cmd,
then tasklist /svc will give me a list of applications,
PIDs and Services. From that I can match up the PID with
the service to know what process on a computer is
connecting to which ports. IS THIS CORRECT?

PROBLEM: I have XP Home and going to: Start/Run & then
typing cmd, then typing: tasklist /svc gives me an
error: Tasklist is not recognized as an internal or
external command. This is aggrivating. Can someone
please tell me why it won't work? One article told me
this was a function of XP Pro only and XP Home users
needed to download XP Powertoys, which includes tasklist
functionality. I did all this and nothing works! (yes i
rebooted). GRRR.

Is this the best way for me to reach my goal of:
identifying EXACTLY WHICH Ports are open on my PC at any
given time, AND also WHICH Programs are opening/creating
those ports (to aid me in identifying Trojans, Viruses,
etc)?

THANKS IN ADVANCE FOR YOUR HELP

 

[Wesley Vogel]

Mike;
Tasklist does not come with XP Home. This worked for me.
Tasklist.exe available here;
http://www.computerhope.com/download/winxp.htm

Copy it to C:\WINDOWS\system32

Start | Run | type: cmd |
When Command opens;
tasklist /svc | ENTER

 

[Kent W. England [MVP]]

Try Active Ports from http://www.protect-me.com/freeware.html

 

[Guest]

Ok, I unzipped the file to C:\WINDOWS\system32. I then
tried to run the command from a prompt: tasklist /svc,
nothing happened, except invalid....

I thought, well he did say to copy, so i thought "i'll
unzip the fileS to a folder on my desktop, then copy them
manually into the C:\WINDOWS\system32 folder". Well I
unzipped it and now there is 11 files that appeared and
one folder with another 4 files in it! So COPY WHAT? I
guess I'm ignorant, since you didn't give any details, I
guess everyone knows how to do this. Am I the only one
who doesn't know what to do with all this and how to make
it work after using computers 20 years? Gee I hope not.
Soooooooo EXACTLY which File/files do i copy and EXACTLY
where to and what's the process to do it? (I know
copy/paste, but not allot past that when it comes to
doing this type thing).

OH, and now what do i do with the files from this
downloaded zip file now in my Windows/system32 folder?
Do I go find them and manually delete them one by one?

Thanks for the help.

 

[Doug Knox MS-MVP]

See www.dougknox.com, Win XP Utilities, Startup Programs Tracker. This
small utility scans your system for startup programs and running processes.
It also allows you to create a log file that can be copied and pasted into a
newsgroup post. The contents of the program window are also copied to the
Windows Clipboard, automatically.

--
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com

 

[Durand]

Open command prompt and type netstat -ano and see if that works. You
can use that to match up the pid process with the processes shown in
task manager. Hope this helps.