what is using tftp.exe and ftp.exeto access internet

[Marcin Domaslawski]

Hi,

Try to use Process Explorer
http://www.microsoft.com/technet/sysinternals/Utilities/ProcessExplorer.mspx


Marcin Domaslawski

 

[H. S.]

tftp.exe and ftp.exe are trying to access the internet zone, so tells me
my Zone Alarm. This is on a fully patched Windows XP machine.

tftp.exe tries to access the network every few hours. So does ftp. Not
sure about the exact frequency, but it is not very high. Sometimes the
tries are days apart.

I have denied the access to both of these programs to access the
internet. Tftp.exe tried to connect to an external IP address whereas
ftp.exe tries to connect to the localhost.

I have scanned my computer using NAV, spybot and adaware and also the
AV_CLS script (which downloads various antivirus utilities and scans the
computer, through a dos based text menu). Nothing was found.

So, I am wondering if there is a way to determine which program or
application is calling the two executables. Actually, I don't care about
tftp (it is blocked forever), but I would like to know what is trying to
use ftp. Any suggestions? The application event manager does not tell me
anything much.

thanks,
->HS

 

[H. S.]

Hi,

Try to use Process Explorer
http://www.microsoft.com/technet/sysinternals/Utilities/ProcessExplorer.mspx


Marcin Domaslawski

Thanks for the link. I am already using it. I am just not sure how to
determine what application calls tftp or ftp at a certain time.
Currently, I do not see anything that is using the two executables.

I am hoping there would be a method to see a log of what applications
called a certain program (e.g. ftp) in the last some period of time. Any
ideas if this is possible?