Port Explorer alerts for new hidden sockets...

Discussion in 'Port Explorer' started by R2D2, Dec 19, 2005.

Thread Status:
Not open for further replies.
  1. R2D2

    R2D2 Registered Member

    Joined:
    Nov 26, 2004
    Posts:
    70
    Location:
    Tatooine
    PE alerts when new hidden sockets detected?

    Does Port Explorer prompt an alert when a new hidden socket (hidden process) suddenly gets detected as PE runs minimized?

    Jeff
     
    Last edited: Dec 22, 2005
  2. R2D2

    R2D2 Registered Member

    Joined:
    Nov 26, 2004
    Posts:
    70
    Location:
    Tatooine
    Well, I'll just apply to my own thread.

    I did an experiment with ZAPro v.4 because I notice when the firewall is running, it reveals a hidden process or socket (vsmon.exe) in PE. So, I shutdown ZA and then restarted it to see if PE would prompt alert of a new hidden process (socket) detected. It didn't.

    If possible, this alert prompt would be a useful feature added to PE because some hidden processes or sockets showing in PE could be trojans.

    Just my thoughts...
     
  3. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Hi there,
    I just now noticed your question still unanswered.
    Port Explorer will show new connections from and to your system.
    When you close the zlclient.exe, that is a local process which doesn't connect to the internet, the vsmon.exe part is the process which will keep testing all traffic and you will have seen that still connected in your list, most probably as a red hidden process, sometimes several instances of them due to connections or portscans.
     
Thread Status:
Not open for further replies.