Re: Strange activity to a laptop?

["Johnson, Greg" <JohnsonG () MISSOURI EDU>]

> A detailed scan of the machine reveals it was listening on
> port 1029 (couldn't find anything open on that port).  ...
> Does ANYONE have any GOOD tools for WinNT/Win2k to find
> out what port is bound to what executable/whatever?!
> Secondly, are there programs that will allow you to
> effectively  'kill' services (GUI maybe?) that NT
> wouldn't ordinarily allow you to see(if hidden?).

Ralph, I've found these useful for similar investigations.

http://ntsecurity.nu/toolbox - Inzider in particular

http://www.sysinternals.com - Handle, TCPView

http://www.zdnet.com/downloads/stories/info/0,,000YKL,.html
  - Startup Cop reveals all levels of startup programs and
    lets you temporarily or permanently disable them.

--

  Greg Johnson - 573-882-5008
  Computing and Network Security Office
  Information and Access Technology Services - 573-882-5000
  615 Locust Street #001
  University of Missouri, Columbia MO 65211