About Terminal Server, Citrix, Delphi and other stuff
I wanted to save the SHSH signatures from my iPhone before updating to iOS 5.01. I started Tiny Umbrella but it showed an error indicating that there’s already a process listening on port 80:
I verified this using netstat (netstat -aon | find /I “LISTENING” | find /I “:80″):
A telnet to port 80 showed there was indeed a webserver running:
The fact that the webserver is running in the system process means that it needs to have System Privileges. It could be either a Service or, less friendly, some kind of malware DLL that injects itself.
I checked with Process Explorer which DLL’s are loaded into the System Process and this didn’t reveal any strange DLL’s:
So a service seemed most likely but I didn’t have any of the usual suspects (in most likely order):
But in my case it was the “Web Deployment Agent Service” (MsDepSvc) which is installed by Microsoft WebMatrix.
.NET .NET FrameWork Active Directory Altiris Automation Manager bug Citrix Dell Delphi Excel Exchange Exchange2003 Exchange2010 Hack HP iOS Java LinkedIn Linux Lync MSI Office Office 2010 Outlook Passat Password PowerPoint PowerShell RES RNS510 SasLibEx Security Terminal Server ThinApp TSAdminEx Unattended VBS VCDS Vista Visual Basic VMWare Volkswagen Windows PE Wordpress XenApp