Re: W2K netstat detects port 1433 is listenning but fport does NOT..., can't start mission critical sql server !!!

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 10/15/05 

Date: Fri, 14 Oct 2005 23:19:15 -0700

I am hearing you make the assumption that it is a light-weight malware,
which may/may not be so. That it shows as running in a System context
only means it is using that account and/or has attached into some process
tree started by System.

Feel good that it is showing at all as that tends to say it is not rootkit
you
are up against (yet).

You might want to try PortRptr to see if the logs help you narrow things
down
http://search.microsoft.com/search/results.aspx?st=b&na=88&View=en-us&qu=PortRptr 

-- 
Roger Abell
Microsoft MVP (Windows Server : Security)
MCDBA,  MCSE W2k3+W2k+Nt4
"SammyBar" <sammybar@gmail.com> wrote in message 
news:e9eJi1R0FHA.3924@TK2MSFTNGP14.phx.gbl...
>I was able to find the process that is listening on 1433 port: It is the 
>System process! I can not shutdown it.
> Anyway thanks for the help
>
> Sammy
>

Relevant Pages