Mstask.exe and open ports
Results 1 to 5 of 5

Thread: Mstask.exe and open ports

  1. #1
    Member
    Join Date
    Sep 2003
    Posts
    42

    Mstask.exe/Svchost.exe and open ports

    After investigating I have come up with no good reason Mstask.exe/svchost.exe listen on a range of ports. Usually around 1038-1051. What is it waiting for? Why does it just sit there waiting for a connection? Does anything ever to connect to it? There's no solid explanation on Microsoft's site, I may be missing it though.

    Just wanted to open this up for discussion. I'm sure it's something simple.

    And the boxes I've seen this on are secure and uncompromised.

  2. #2
    Member
    Join Date
    Dec 2003
    Posts
    97
    Could this be for remote computer management? ie, using the computer management snap-in (compmgmt.msc) to remotely view event logs, local users and groups, etc.

  3. #3
    Member
    Join Date
    Sep 2003
    Posts
    42
    You know what? You might be right. Let me test it and I'll let you know. I should have thought of that and tried it out.

    Thanks.

  4. #4
    Senior Member Falcon21's Avatar
    Join Date
    Dec 2002
    Location
    Singapore
    Posts
    252
    Is it safe to kill the process to close the listening ports?

  5. #5
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,786
    unless your schedueling things to happen its save to stop mstask. but dont try to stop svchost...especially on XP your computer will restart.
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides