Search Posts

Tracking down a Malware or Virus

Useful Tool is Netstat
netstat -a -n -o
Example
C:\WINDOWS>netstat -a -n -o | grep 6060
TCP 0.0.0.0:6060 0.0.0.0:0 LISTENING 2752
Relate to service
tasklist /svc /FI “PID eq pid”
Example:
C:\WINDOWS>tasklist /svc /FI “PID eq 2752M
Image Name PID Services
========================= ====== =====================
Apache.exe 2752 StoreGrid_WebServer

Creative Commons Attribution-ShareAlike 3.0 United States
This work by Dark Jedi Wells is licensed under a Creative Commons Attribution-ShareAlike 3.0 United States.