I am wondering how can you know who is running the mstsc.exe? I have recently in my PC that the mstsc.exe listens to the port that I am using. I read that mstsc.exe is used by the remote desktop. Also that the remote desktop uses a default port.
But recently once in a while the mstsc.exe would just conflict with the port I am using. For example, my apache web server would suddenly not start properly.
I would then search for the culprint using netstat -aon | findstr 80 then tasklist | findstr . Then to my surprise it is the mstsc.exe. I would just kill the task to resolve the issue. It conflicts with my other port also once in a while. For example on the Tomcat port 8080 and even on other custom port that I use in my applications (e.g. 2003, etc).
Anyway, I got nervous if there is a virus using this so but our realtime scan and full scan does not detect it, we do have updated virus pattern files.
Any ideas guys who is running mstsc.exe? Or why it suddenly listens to my other ports?
