A user had a number of instances of serv-u ftp server on an XP pro machine. I removed all the obvious ones. I ran tds3 the locahost port scan and it turned up a high number tcp port open. I tried telnetting to that port and it was another serv-u ftp server. But the problem is, no process shows up anywhere associated with that port. I tried netstat -an and fport and neither one showed that port being used. But clearly it was. What can I do to find the program that is doing this and remove it? I tried the port explorer program it and also did not show anything using that port. Does that mean it's a driver perhaps?