eScan Blog
eScan Website
eScan Forum
eScan Feeds From eScan Wiki
←Older revision | Newer revision→
This option helps in enhancing the system security, performance and diagnostic.
It has different options like "View TCP", "System Information" and "Send Debug Information".
1) View Tcp:- This option is helpful in knowing which process is running on which port, where it is connected along with it’s status.
It has different options like "Active Connections" and "Established Connections".
A) Active Connections -
1. Process - this tab on the active connections page displays the total number of process/es that are active in the background and working 2. Protocol - this tab on the active connections page displays the protocol being used by these process/es, 3. Local Address - this tab on the active connections page displays the local address from where these processes have started/originated from. 4. Remote Address - this tab on the active connections page displays the remote address to where these processes are connecting to. 5. Status - this tab on the active connections page displays the status of the connection of a particular process or all
B) Established Connections - 1. Process - this tab on the established connections page displays the total number of process/es that are active in the background and presently on. 2. Protocol - this tab on the established connections page displays the protocol being used by these process/es, 3. Local Address - this tab on the established connections page displays the local address from where these process/es have started/originated from. 4. Remote Address - this tab on the established connections page displays the remote address to where these process/es are connecting to.
Note:-
This View TCP module is helpful in precisely knowing which process/es are running in the background, using which protocols, the local address from where it is originating from and the remote address to where it is connected to along with it's status. So, in case you suspect your system to be infected with any malware/s, this module basically helps in identifying the process/es along with it's other characteristics (mentioned above) and then take an informed decision (by right clicking on the process/es) to either check the process/es properties, find more information /detail if available on the said process/es, kill /end the process/es, etc... thus resulting in restricting /blocking any and all malware/s activity.
2) System Information:- This option helps in knowing what software and hardware the system in made up off. Basically, it enables the user /administrator in successfully performing an Audit and Inventory of each or all systems throughout the network (lan,man,wan supported).
It has different options like "Details" and "Sharepoints".
A) Details: This option enables you to check and retrieve the details pertaining to the system like - 1. Machine Identification - This displays the machine identification details like the host name (machine name), user name, boot information, the last boot and for how long the system has been up and runnning, etc... 2. Operating System - This displays the operating system details like the operating system being used, it's version, product identity, installed suites, environment, etc... 3. CPU - This displays the CPU identification details along with it's features. 4. Memory - This displays the physical total memory installed on the system along with it's properties. 5. Display - This displays the display adapter properties and capabilities. 6. APM (Advanced Power Management) - This displays the APM status along with the Battery. 7. Media - This displays the available devices along with the sound devices. 8. Software - This displays the details of the softwares installed/ 9. Startup - This displays the items that make the startup like the startup group (common), startup (user),win.ini, registry startup - run once,HKCU\Run,HKLM\Run. 10. Processes - This displays the total number of processes that are currently loaded in the background. These are displayed along with the PID, Image Name and the Location. 11. Time Zone - This displays the current time zone set for the system. 12. Network - This displays the network adapters, IP address, MAC address, WinSock details. 13. Devices - This displays the devices attached on the system. 14. Printers - This displays the printers attached on the system, it's properties too can be checked. 15. Engines - This displays the engines found if any on the system like Microsoft Data Access Objects, Borland Database, etc... along with DirectX drivers and devices. 16. Drives - This displays the drives attached on the system, the file system type (fat32,ntfs), the serial number, it's capacity and free space available, bytes/sector,sector/cluster, total clusters,free clusters.
B) Sharepoints: This option enables you to check and retrieve the details pertaining to the share points (shares) and other details available of the system like - 1. Shares - This displays the shares that are available with other details like it's name,path,type,descriptor,maximum users, current users,permissions and comments along with the connections. 2. Sessions - This displays the sessions that are open with other details like machine, user, type, open files,connected time, idle time, guest. 3. Open Files - This displays the files that are open with other details like file name, accessed by, locks if any and the mode (open or close).
3) Send Debug Information:- This option helps in generating a debug file which equips the techical department of MicroWorld in analyzing the problem being faced at the user’s end and accordingly then give a solution. It makes a zip file (debuges.zip) in the Debug folder within the installed folder of eScan in addition to sending the email to the email address specified while generating the same.This zip contains all the important files of the eScan software.
