The computer runs multiple programs simultaneously.If program uses an Internet connection, it is allocated a specific port.Sometimes the user is necessary to check which port uses one or another program .
need to determine what ports uses program (or some program uses ports ), usually occurs in the case of suspected computer infection Trojans.If you notice something suspicious, open a command prompt: "Start" - "All Programs" - "Accessories" - "Command Prompt."
command line, type tasklist 'and press Enter.You will receive information about all the processes running on the system.Note the PID - the identifier of the process.It will help determine what program uses a particular port.
Type in the command prompt netstat -aon and press Enter.You will see a list of current connections.In the column "Local Address" at the end of each line of the port number.In the column PID specified process IDs.Looking port number and the corresponding PID, go to the list of proc
esses and ID number to determine which process is using this port.
If you can not on the name of the process to understand what program it belongs to, use a suitable in this case the programs.For example, the program Everest, it also Aida64.Run the program, click the "Operating System", select the "Processes".In the process list locate the string you see and run it.This will help determine which program belongs to the process.
used for the same purpose of the program AnVir Task Manager.It allows you to monitor all suspicious processes, including program processes, connect to the Internet.All suspicious processes are allocated in the program list in red.
If you see that the port is unknown to you the program, in the presence of this compound in the "External address" (command netstat -aon) you will see the ip-address of the computer that you are connected.In the column "Status" will stand the value ESTABLISHED - if the compound is present at the moment;CLOSE_WAIT, if the connection is closed;LISTENING, if program waits for a connection.The latter is typical for backdoors - a form of Trojans.
Tip 2: How to port software program
port - is the conventional number from 1 to 65535, which indicates which application is addressed to the data packet.The port, which works with a program called open.It should be borne in mind that at the moment any port can operate with only one application.
Get a list of open ports and their associated applications can be different ways.If you would like to use means Windows, invoke the command line using a keyboard shortcut Win + R and type cmd.In the console window, type netstat -a -n -o
program displays a list of active connections.In the column "Local Address" indicates the network address of your computer and through the colon, port number, which is occupied by some other application.In the column "External address" leads IP remote computer and the port number to which the application communicates.Column PID is the process identification number.Find the port that you are interested in and record the associated PID.
Use hotkeys Ctrl + Alt + Delete in the dialog box "Security Windows» click "Task Manager."This service can be run differently: call the command window combination Win + R and type taskmgr.In the "View" menu select the option "Select Columns" and check the box next to "Identif.protsessa (PID)».Find the PID column of the number you are interested in the process, and in the column "Image Name" - the name of the program that uses the appropriate port.
can find active ports and their associated applications using the programming port scanners, for example, TCPView.It is distributed free of charge.Download the utility from the developer's site and unpack the archive.After starting in the Process column displays the names of all the program of active processes in the columns Local Port and Remote Port - port number, which is an exchange between the packages, ie,and on your remote computer.
By default, the information is updated every second, but you can change this setting by going to the View menu, click Update Speed.New connections are highlighted in green, deleted - red.Changing the state point is marked in yellow.To close the connection, click the right mouse button and select from the drop down menu Close Connections.
- which ports are using skype