Re: Unknown App

[Sharad Birmiwal <sharadbirmiwal () gmail com>]

i recently discovered some worm on my network that tried to spread a
payload file 'xxxxxxxx' by binding on port 80. it didn't serve a
banner or any webpages, but http://<ip>/xxxxxxxx worked.

sharad birmiwal

On 7/21/05, Scott Fuhriman <fuhrimans () llix net> wrote:
> The easiest and fastest approach is to use a port mapping utility like
> Active Ports
> (http://www.ntutility.com) or TCPview (www.sysinternals.com) (there are
> others like fport, etc...) which will allow you to see what process has port
> 80 open on the machines.
>
> This will allow you to identify what application/process is utilizing that
> port.
>
>
>
> Scott Fuhriman