process names with *

Discussion in 'Port Explorer' started by zkab, Feb 20, 2004.

Thread Status:
Not open for further replies.
  1. zkab

    zkab Registered Member

    Joined:
    Jan 14, 2004
    Posts:
    2
    A simple question from a PE beginner ... what does it mean that some of the names of a process starts with a *
    An example is * msmsgs.exe

    /zkab
     
  2. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    This may help :) From the PE help file

    Windows NT4/2K/XP/2003

    Under Windows 95/98 Port Explorer isn't able to map all sockets to their parent process (usually only the ones that are loaded very early by the system). Such processes will normally display with the process name of "--NETSTAT--", indicating that Port Explorer wasn't able to map the process, but it could still see the socket using standard netstat techniques. However, under Windows NT4, 2K, XP and 2003, Port Explorer is able to map ports to all processes by using undocumented functions that are built into the operating system. Sockets that would normally display as '--NETSTAT--' but have been resolved by Port Explorer using this technique will have an asterisk beside their name, for example:
    * c:\path\process.exe
    rather than...
    c:\path\process.exe
     
Thread Status:
Not open for further replies.