How to find out what is running on localhost port

Question

I have something running at port 9090 on my local machine.

It's probably something I set up long ago and forgot about... how can I find out what it is?

I am using Windows 8.

Answer 1

Run netstat -a -o | findstr "9090" (from either CMD.EXE or Powershell) and have a look at the far right column. That's the Process ID (PID) of the owning process. Match it up with running processes in Task Manager.

Answer 2

@Evan Anderson answer did not work for me cause I got a message

FIND: Parameter format not correct

so I replaced the Find call with a powershell Select-String

netstat -aon|sls 61456
TCP    127.0.0.1:61456        0.0.0.0:0              LISTENING       31796

finally I open Task manager and looked sort the PID column looking for 31796

Update

Usually I want to kill these processes so here a powershell script that does not need manual intervention

netstat -aon|sls 5000|%{("$_".substring("$_".LastIndexOf(' '))).Trim()}|%{
    $id=$_
    Get-Process|?{$_.id -eq $id}
}|Stop-Process

Answer 3

Did you ever install Zeus admin server or Zyxel VoIP or CiscoSecure on that machine? Other possibilities include a Trojan such as Aphex's Remote Packet Sniffer or the IANA WebSM designation.

Take a look here or search the web for port 9090 or any other for that matter.

You can always do a basic intrusion testing using the GRC ShieldsUp! service.