Security

Ask something
Discussion Locked

Newbie looking for Utility...

0 helpful
2 replies

by njdevil11

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Does anyone know of a cli or gui utility that can determine & report any established remote IP connection to a port using UDP? I was trying to access a drive remotely and was messaged that there were too many connections open. This agent uses AOL IM to speak with clients & receives email constantly; unfortunately, this box did get the new SoBig AND BugBear; they were quarantined. Using 'NetStat -a' I find connections exist thru UDP, the local address is defined but the Foreign address is not (shows *:*). Perhaps this utility is unable to report due to forwarding restrictions or security on the remote machine is tight? Any help is welcome...

2 replies

by zar

You can try using Neotrace, to find out where the remote user is, also go to this page http://www.sysinternals.com/
they have several utilities that will help you. by the way your are telling me that you quarentined the viruses, why not delete them, remember that these viruses copy themeselves to more than one location, so you migh be infected still. If I was you i would make shure they are gone.

by njdevil11

I'm not running the show here, I have another posting that explains how things are 'run' here. I was instructed to leave them there. Makes absolutely no sense to me, but you can bet I document all instructions given to me.

This discussion is closed to new replies.