Tips Security
Determine which processes are using the TCP protocol

This tip will allow you to see what processes are using the TCP protocol which is used to connect to the internet. This will allow you, for example, to detect the presence of unauthorized processes (malware, spyware and other spy programs) which are looking to send confidential information to the outside.

Tips & Tricks : categories

Customization, Internet, Network, Optimization, Others, Security, System

Determine which processes are using the TCP protocol

February 15th, 2007 - 06:00 pm ET by D. T.

When looking over a computer network, if the data streams of a machine seem abnormal, you will generally look at the applications and their processes running in the background. If knowing which applications sending and receiving data is relatively easy to detect, knowing which processes are running in the background is less simple. But there is a way of finding this information out.

First of all you will need to launch windows command line interpreter by clicking “Start” and then selecting “Run”. In the command box type “cmd” and press the OK button.

 Menu démarrerBoîte de dialogue Exécuter
Launching the command line interpreter
Ligne de commande à saisir Affichage des résultats
Inputting the command and observing the results

 
At the command line, enter the “netstat –abnov” command and press Enter on the keyboard. You then just need to read the information that is displayed and look for suspect processes and lookup what they do with the help of our dedicated section which references system and application processes.

To keep a copy of this list, input the command “netstat –abnov > c:\ListTCPProcesses.txt”. You then simply have to go to the root of the hard drive and open the file to see its contents, and print it of necessary.

Post a comment
Previous tip and trick Next tip and trick
Create auto extractible archives with iexpress 2 Start the command prompt in the folder of your choice