A wild httpd server
So today I was doing some investigation to see how easy I could set up a gallery server for someone for use on the home LAN (sidenote: feel free to suggest your favuorite alternative) using a WAMP server, and apache was moaning about port 80 already being in use, I move it to another port and it's fine.
That leaves the question of what the hell is on port 80. I look at http://localhost and it gives me a generic 404 error. This is odd because I don't recall setting up a server to always be running, although I do have a number of stray WAMPs from various little projects I've done in the past. While I like to know what's running on my computer and run it 'clean', I'd say I'm probably not above forgetting something. I'm not aware of any malicious activity, and a recent spybot scan didn't pick up anything, so I'm trying to identify what it is.
Some things I've found:
There's nothing in the process list that clearly identifies itself as a httpd server, there's no services (running or not) that identify as a httpd server that I'm aware of. Using Sysinternals TCPview, at the moment I request localhost I get an entry from "[System Process]". I can't access the server from another computer on the LAN, which gets a "can't find any server" error from the browser (and I'm on a NAT router, so I'm not overly concerned about external hax0rs on my PC stealing my megahurtz... yet).