Need port number

Does anyone know how I can locate what port a streaming applicaiton uses? I need to block one called "MSPlayer ". It appears to be an one line gaming.

Thanks

 

Sue, can not find specifics to MSplayer on Google. Is their a chance this is nsplayer? If yes, this may be part of Windows Media Services Series 9. If yes, it uses port 80, making it difficult to manage via port control. You may be able to control by program name (nsplayer/9*)?? via firewall.

ALSO
Check this site out. I am not a gamer. You feel it is a on-line game.
I did not take the time to understand if this is a stand-alone, but it appears to be a download program and then played on the net.
nsplayer.com

Additional support tools
You may need to use a program like TCPView by Sysinternals. This program provides the following information ....
TCPView is a Windows program that will show you detailed listings of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections. On Windows NT, 2000 and XP TCPView also reports the name of the process that owns the endpoint. TCPView provides a more informative and conveniently presented subset of the Netstat program that ships with Windows.

 

It is MSplayer. What it appears to be is Windows media player when they connect to the web to download a video. I am setting up NetEnforcer and MSPlayer is consuming all the bandwidth.

Sue

 

Sue, having problems nailing down the "identity" of MSplayer.
It does NOT have an association with WMP processes such as wmplayer.exe,
mplayer2.exe, mplayer.exe (maybe possible be win3.1?). Their is some association to MidiShare . MidiShare is a real-time musical MIDI operating system, but this would not handle video.
Then I ran across this post at Wilders Security Forums. A spyware veteran was suspicious of program and requested a zipped copy for further investigation. Will check for further info.

Addtional
Wilders Security Forum - complete thread. For convenience, this is the complete thread.
It was not specific to msplayer.exe presence. Poster 8 had concerns.

 

What about these, NetForcer lists:

IP/TCP 35176
IP/TCP 49970

How do I find out what these are for?

Thanks

 

Have not been able to find any "Nasties" known to travel on them ports.
These are some of the port checkers I used. Is MSplayer running on your computer or are you monitoring a network? Would be helpful if we could have more info on this program... File path, how/when loaded, process name (I assume msplayer.exe)?

 

All I can really tell you is that I am setting up NetEnforcer and MSPlayer is consuming all the bandwidth. Sorry I don't know more. It appears to be just a few users doing all the damage.

 

I have not been able to find msplayer to show up on any of the popular Task List processes. This would make me nervous. If your job includes monitoring traffic on your network, I would block msplayer and have them use a known media player. If "user" is the BOSS, let him know of this situation. If he ignores your concerns, the problem becomes his own should something go wrong.

 

I did block it and internet traffic is functional again. Thanks for your help!

 

Well done

 

Sue--Now you want to get MSPlayer off your hard drive. I suspect it is malware. Follow the suggestions here
http://www.windowsbbs.com/showthread.php?t=37074
You may find that you have other baddies, too.

 

Sue - you might want to add some of the free network monitoring utilities from http://www.sysinternals.com/NetworkingUtilities.html to your bag of tricks for the next time you need information.

 

It is not by any chance MidiSharePlayer
[l=http://midishare.sourceforge.net/]http://midishare.sourceforge.net/[/l]
is it ?
There are malware which use this name too, http://www.3dogvideo.com/html/wallon.html for example.

 

There are malware which use this name too, http://www.3dogvideo.com/html/wallon.html for example.

The above link provided by oshwyn5 contains the following quote....

Thanks Pete for this link, good find.
Sue, suggest you read the complete thread provided by oshwyn5 and follow Welshjim's advice. Since this is a network enviroment, each computer should be checked.

 

I have over 700 computers on the network.........Anyway to check them all at once?

 

I would see if Mcafee stinger
Please download
Mcafee stinger multivirus removal tool
Install and run
Removes it if you confirm that the one machine is infected.
Then if so, use it on all machines.

If you confirm that it is this particular one, you could do a file search of all machines to see if any have one of the characteristic files.

In the meantime I suggest isolating this machine from the rest of the network immeadiately.

 

Good Morning Sue
Yikes, big network. Out of my league, let the network experts guide you.
Could you provide the forum with some basic info ...
Are you providing a "Internet gateway only" to clients PC's (example a school)?
Basically you only provide and manage internet bandwidth for client pc's.
OR
Is this network that has accessable client PC's with typical network shares one would expect in a business environment?