In-Reply-To: <[EMAIL PROTECTED]>
Hello
I am reading a paper from security online related to detecting and
removing malicious code on Win2k.There is reference to some tools that may
be the answer to your question.The article in question is from H
CArvey "Detecting and removing Trojans and malicious code from Win2" and
you can find the tools on www.sysinternals.com
Hope that help.
>Received: (qmail 24603 invoked from network); 25 Sep 2002 20:45:45 -0000
>Received: from outgoing2.securityfocus.com (HELO
outgoing.securityfocus.com) (205.206.231.26)
> by mail.securityfocus.com with SMTP; 25 Sep 2002 20:45:45 -0000
>Received: from lists.securityfocus.com (lists.securityfocus.com
[205.206.231.19])
> by outgoing.securityfocus.com (Postfix) with QMQP
> id 5070A8F38C; Wed, 25 Sep 2002 13:40:13 -0600 (MDT)
>Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
>Precedence: bulk
>List-Id: <security-basics.list-id.securityfocus.com>
>List-Post: <mailto:[EMAIL PROTECTED]>
>List-Help: <mailto:[EMAIL PROTECTED]>
>List-Unsubscribe: <mailto:[EMAIL PROTECTED]>
>List-Subscribe: <mailto:[EMAIL PROTECTED]>
>Delivered-To: mailing list [EMAIL PROTECTED]
>Delivered-To: moderator for [EMAIL PROTECTED]
>Received: (qmail 28029 invoked from network); 25 Sep 2002 05:54:17 -0000
>Message-ID: <[EMAIL PROTECTED]>
>Date: Wed, 25 Sep 2002 11:54:33 +0530
>From: R Pradeep Chandran <[EMAIL PROTECTED]>
>Organization: Siemens Information Systems Ltd.
>X-Mailer: Mozilla 4.79 [en] (WinNT; U)
>X-Accept-Language: en,en-US,en-GB,ml
>MIME-Version: 1.0
>To: [EMAIL PROTECTED]
>Subject: Ports->Process on Win NT/2k
>Content-Type: text/plain; charset=us-ascii
>Content-Transfer-Encoding: 7bit
>
>Hi All,
> Is there any utility which provides information on the owner(?)
>of a socket on Win NT/2k? What I want, is to find out which process has
>opened a socket on the machine. For example, if netstat shows that a
>process is listening on port 80, I should be able to use this utility
>and find out what that process is.
>Hve a nice day,
>Pradeep
>--
>Keep me away from the wisdom which does not cry, the philosophy which
>does not laugh and the greatness which does not bow before children.
> -Kahlil Gibran, mystic, poet and artist (1883-1931)
>R Pradeep Chandran
>
