How to find hidden apps and services

  • Thread starter Thread starter Chris
  • Start date Start date
C

Chris

If a user were to use an app such as HideApp.exe to hide a
service (e.g. ServUDaemon - possibly renamed to something
else) on Win2000 Adv Server, can anyone tell me how I
might unhide the service, find it and remove it? Thanks,
Chris
 
You could look in Task Manager for strange processes and be sure to show processes
for all users, check the registry keys for startup programs as described in KB link
below, use something like Fport that will map listening ports to application/process,
or maybe run a trojan scanner or something like SpyBot Search and Destroy that may
detect programs like that. You may need to compare processes running and ports
listening to a like configured known clean machine. As far as removing, assuming it
is not listed in add/remove programs, you could do a search on http://Google.com for
the particular program such as "remove bogusprogram". If nothing else you would have
to remove executable and search for related registry entries to remove. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;137367
http://packetstormsecurity.nl/filedesc/fport.zip.html
 
Thanks very much. FPort did the trick. VERY useful utility.

-----Original Message-----
You could look in Task Manager for strange processes and be sure to show processes
for all users, check the registry keys for startup
Click to expand...
programs as described in KB link
below, use something like Fport that will map listening ports to application/process,
or maybe run a trojan scanner or something like SpyBot Search and Destroy that may
detect programs like that. You may need to compare processes running and ports
listening to a like configured known clean machine. As far as removing, assuming it
is not listed in add/remove programs, you could do a
Click to expand...
search on http://Google.com for
 
Back
Top