please help with fport install

i feel like a complete twit for asking, but i've been trying for a while with nothing but frustration.
i downloaded the foundstone_tools.zip from http://www.foundstone.com/knowledge/infoterms.html and tried to open with winxip32.exe. everytime i do, i get a

Quote:

---

Cannot open file: it does not appear to be a valid archive. If you downloaded this file, try downloading the file again.

---

i have downloaded it three times (3rd times a charm, right?) to no avail. i still get the same error message.

has anybody else had this problem? how did you get around it? thanks in advance.

Qwerty.

I had no problem opening it with WinZip... Here is a screen shot...

thnx joey.

i can get into the fport.zip, but not the bunch. when i run fpoprt on my nt server, i get another error message.

Quote:

---

the dynamic link library psapi.dll could not be found i specified path...

---

im going to install the dll so i can run fport, but i would still like to be able to get all of them in the one package rather than dl each individually.

Would you like me to zip & send you the package I have. It will ensure you get everything??? Just PM your e-mail addy...

Did you read the readme.txt?

Quote:

---

Readme for fport v1.31

fport reports all open TCP/IP and UDP ports and maps them to the owning application.

fport requires the usage of psapi.dll. On Windows NT, psapi.dll must be in the same dir,
or path, as fport. For Windows 2000, this is not the case, since the system contains the
.dll.

The program contains five (5) switches. The switches may be utilized using either a '/'
or a '-' preceding the switch. The switches are;

/h - Help
/a - sort by application
/i - sort by process ID
/ap - sort by application path
/p - sort by port


To run the program, place the .exe and the .dll in the same folder and run the .exe.


For updates visit: www.foundstone.com

---

Ammo

ammo: i sure did. i can get fport to work now, just cant open the foundstone_tools.zip for some reason. joey_batch_file is going to send me his copy that he got to work, so i'll try that. otherwise, i'll just dl all the files seperately. thanks.

[edit] i just didnt have the psapi.dll on the machine at all. some servers have it, some dont. i was the lucky one. [/edit]

Just for kicks, you may want to reinstall WinZip. I've downloaded the same file and had no trouble, and since that file is coming from Foundstone, it should be legit...

thanks Maverick, but still no luck. i'm getting this message still:

Quote:

---

Message WZ40

The Zip file cannot be opened. If this Zip file is part of a backup set, please insert the last disk of the backup set and try again (this is required by the standard Zip multi-disk format). You may subsequently be prompted to insert other disks from the backup set.
If you downloaded this file, the most likely cause of this problem is a bad download. The best solution is almost always to download the file again. If this does not solve the problem, see the web page http://www.winzip.com/downprob.htm for hints on resolving download problems.

If you did not download this file, and it is not part of a backup set, it is either not a valid Zip file or it is corrupt, perhaps because of a bad diskette.

Copyright ¸ 1991-1998 Nico Mak Computing, Inc.

---

thanks. it was worth a try.

Quote:

---

Originally posted here by qwerty_smith
thanks Maverick, but still no luck. i'm getting this message still:



thanks. it was worth a try.

---

Can you unzip any .zip file on your system? Try downloading something that is zipped just to see if you can unzip it.

What is your OS and what version of WinZip are you using?

Also, check the attributes for the .zip file, make sure that the only attribute that is checked is the Archive attribute...

Qwerty - The files I sent you were zipped, did you have a problem opening any of those? Also I sent the package to the other e-mail address you sent. I am assuming it is there, I haven't got a message failed as of yet.

i think i found my problem, all.

Maverick yes. i can open other zip files. winzip isnt the problem. here is what i think. gee, i feel like columbo. ;)

Winproxy, the program by Ositis i have serving up internet for everyone, has an antivirus subscription. the anivirus (and this is the first time i've seen it work?) has denied me parts of this file as it has a suspicious trojan-looking file in it. here is the message i got from it:

Quote:

---

**********************************************************
**********************************************************

WARNING: WinProxy has detected a virus in a file
attached to this e-mail message!

The infected attachment has been automatically removed to
protect your network.

It is recommended that you contact the sender and notify
them of the problem so that they can clean the file and
re-send it to you without the virus.

Infected file: No file name available
Virus information: TROJ_FLDR.UDP.20 in udpflood.exe in udpflood.zip

Virus detected by:
WinProxy (Version 4.0 R1f) - http://www.WinProxy.com/

**********************************************************
**********************************************************

---

now this is what happened when joey_batch_file tried to send me the complete file and... that is why that specific segment wouldnt come through excite mail. so what i have to do is either pick it up at home (its almost time to go) and burn it all to a disk or turn off my antivirus sub for a couple mins while i download. it rather interesting. i wonder how much winproxy keeps from me. and i'll have to do a little research into TROJ_FLDR.UDP.20 as it may be what? a trojan? spyware? some silly file that looks like a trojan? everyon who has the complete f-set might want find out too. when i do, i'll post it.

thanks for the help, everyone. it was a combined effort that helped this happen.

Yes, but that is quite wierd that my virus scan never picked it up.

I just scanned the folder I sent you, and again nothing?????

here is what i got.

i searched google and all i got were japanese? chinese? websites. one in french.
i searched altavista i got nothing.
i searched infospace and i got a couple of interesting leads. one in english, leads to asian website.

Quote:

---

TROJ_FLDR.UDP.20 - ? ?
This Trojan is written in Visual C++. It can flood any network computer or server. It does not have a destructive payload.To flood, it sends garbage data, text or file in to the target computer from a remote location
http://www.trendmicro.co.jp/vinfo/vi...OJ_FLDR.UDP.20


and from http://www.pharao.de/aktuelles/viren_06.htm
Das Sicherheitssystem von AnNoNet hat im Monat Juni folgende Viren registriert und abgefangen:
WORM_KLEZ.H 49,76 %
JS_EXCEPTION.GEN 40,47 %
WORM_KLEZ.E 2,85 %
JS_NOCLOSE.E 1,90 %
JS_SEEKER.E1 0,95 %
WORM_YAHA.E 0,95 %
WORM_GONER.A 0,48 %
JOKE_SCROLL.A 0,48 %
WORM_HYBRIS.M 0,48 %
PE_Magistr.B 0,48 %
TROJ_FLDR.UDP.20 0,24 %
JOKE_BADGAME.A 0,24 %
PE_NIMDA.E 0,24 %
VBS_LOVELETTR.AS 0,24 %
WORM_BADTRANS.B 0,24 %

---

[edit]so i sent out a notice to foundstone to let them know what i found. i wonder if some hacker got pissed and was able to insert a trojan into the file?! or if foundstone put it in there? i can only guess at this point... i keep looking[/edit]

It picked up the sig of a flooder, it dosn't know thats what you want. all it knows is its a flooder.

Norton doesnt pick it up as a trojan.