ScanTCP and UCP Ports for Virus or Worm
Question:
Does WinBatch have any extender capable of scanning for open TCP & UCP ports on a computer. After discover
the open port, issue a command to close it.
Thinking of creating a WB script to scan a virus / worm infected computer & disabled the virus by closing
the ports used by the virus, manually removing the virus registry keys & files.
Answer:
The Winsock extender can be used for work with TCP connections & TCP ports, but there is no UDP support or
raw IP datagram support in the Winsock extender. There isn't any firewall functionality built into the
extender, so I'm not sure how you'd go about closing the ports used by the virus/worm. You should have no
problems using WinBatch to manipulate the registry & files as part of a disinfection routine.
Article ID: W16380
File Created: 2005:02:18:12:20:08
Last Updated: 2005:02:18:12:20:08