Port Explorer alerts for new hidden sockets...

PE alerts when new hidden sockets detected?

Does Port Explorer prompt an alert when a new hidden socket (hidden process) suddenly gets detected as PE runs minimized?

Jeff

 

Well, I'll just apply to my own thread.

I did an experiment with ZAPro v.4 because I notice when the firewall is running, it reveals a hidden process or socket (vsmon.exe) in PE. So, I shutdown ZA and then restarted it to see if PE would prompt alert of a new hidden process (socket) detected. It didn't.

If possible, this alert prompt would be a useful feature added to PE because some hidden processes or sockets showing in PE could be trojans.

Just my thoughts...

 

Hi there,
I just now noticed your question still unanswered.
Port Explorer will show new connections from and to your system.
When you close the zlclient.exe, that is a local process which doesn't connect to the internet, the vsmon.exe part is the process which will keep testing all traffic and you will have seen that still connected in your list, most probably as a red hidden process, sometimes several instances of them due to connections or portscans.