Re: FTP Port in use error

Hey Phillip,

Thanks.. I found it. It was a version of FileZilla. When I ran NETSTAT i
didnt use the switches. I needed to run netstat -aor .. "a" for All
listening ports, "o" to get the process ID of each entry, and "r" to show
the routing table. I tracked down the process ID in task manager and found
it lurking in there. That makes me wonder if it is a piece of malicious
software. One problem solved, another created. Thats job security!
Thanks Again for your replies.

Ssam


"Phillip Windell" <philwindell@xxxxxxxxxxx> wrote in message
news:eJFg44e3HHA.4400@xxxxxxxxxxxxxxxxxxxxxxx

"SeriousSam" <Pleasereply@xxxxxxxxxxxxxxxxx> wrote in message
news:e5KQdyc3HHA.5852@xxxxxxxxxxxxxxxxxxxxxxx
Yikes, I shoulda thought of that. Thanks. The computer will respond to
FTP from the command line of another machine. It cant be the IIS FTP
though, because the service is not running. I have already thoroughly
checked the machine for other FTP progs, and I expected to find CUTEFTP
installed, because i used it a couple times, but it is not resident. Odd.
Can it leave the port tied up even after it is uninstalled?

Those (CuteFTP, etc) are FTP Clients, not FTP Servers. Not the same
thing. You cannot connect "to" an FTP Client,...you can only connect to an
FTP Server. Therefore that is what you have to look for. It could be a
legitiment one (like IIS) or it could be a Virus, a Trojan (providing an
FTP backdoor for a hacker), Spyware, Malware,...just name your favorite
"evil" type of software and it could be the one.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or
Microsoft, or anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------




.

Relevant Pages

  • Re: Separate Intranet and Extranet Servers?
    ... WSS will not make a great FTP replacement, ... SharePoint server. ... I also don't want partners to be able to view other ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: VPN to ISA server, cant FTP through it
    ... FTP connection for that matter. ... through a VPN, will they not be encrypted anyway? ... but have really only been doing simple maintenance on the ISA server, ... Troubleshooting Client Authentication on Access Rules in ISA Server 2004http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d- ... ...
    (microsoft.public.isa.vpn)
  • Help with IPFW + NATD + Passive FTP
    ... passive FTP connections through IPFW with NATD enabled. ... $cmd 005 allow all from any to any via dc0 ... # Interface facing Public internet ... # Allow out access to my ISP's Domain name server. ...
    (freebsd-questions)
  • RE: Client Computers cannot upload or download from Remote FTP ser
    ... SBS External NIC - Cannot FTP From this server ... SBS Internal NIC ... FTP server is Checked in Routing and Remote Access - Internet Connection - ...
    (microsoft.public.windows.server.sbs)
  • RE: Client Computers cannot upload or download from Remote FTP ser
    ... Only FTP via the MS DOS FTP Client ... The server that works is a member of the SBS's Domain, BUT as I indicated, ... the router, not the SBS server. ... The client event log has nothing related logged. ...
    (microsoft.public.windows.server.sbs)