A simple question from a PE beginner ... what does it mean that some of the names of a process starts with a * An example is * msmsgs.exe /zkab
This may help From the PE help file Windows NT4/2K/XP/2003 Under Windows 95/98 Port Explorer isn't able to map all sockets to their parent process (usually only the ones that are loaded very early by the system). Such processes will normally display with the process name of "--NETSTAT--", indicating that Port Explorer wasn't able to map the process, but it could still see the socket using standard netstat techniques. However, under Windows NT4, 2K, XP and 2003, Port Explorer is able to map ports to all processes by using undocumented functions that are built into the operating system. Sockets that would normally display as '--NETSTAT--' but have been resolved by Port Explorer using this technique will have an asterisk beside their name, for example: * c:\path\process.exe rather than... c:\path\process.exe
