Does anyone know what tcp port 251 is used for on XP. It is not active until
the computer is logged into, and I have shut down every service that I can
without effect.
Using <netstat -ano>, I recovered the ProcessID. Then using a utility called
<pslist.exe>, I traced it to one of the copies of <svchost>. Searching the
registry, I tracked it to the group <netsvcs>. Unfortunately, that particular
group has 44 services that it supplies, and that is where I run into a
roadblock. There is supposed to be a utility called <tasklist.exe> on the XP
CD, but I cannot find it there or on Microsoft's site.
As an aside, I discovered quite by accident that Microsoft has Spyware software
installed that reports to 207.46.248.249 on port 80. All completely invisible
in the background.
I found a download of what appears to be (based on context) the
correct tasklist.exe file here. Scroll down the page to find it:
http://www.bit-quest.com/forums/index.php?showtopic=1197
But I don't have XP myself so I can't help other than that. I did d/l
and scan the file with three excellent DOS av scanners and none
alerted.
I suppose that's no surprise? Any ideas on how to block it yet?
You don't suppose that's the clock updating thingy do you?
As an aside, I discovered quite by accident that Microsoft has Spyware
software installed that reports to 207.46.248.249 on port 80. All
completely invisible in the background.