-
Weird Connections...
I did a netstat -a on my computer and I get a lot of weird connections..... The reading of them is below... Should I be worried about any of these?
Code:
Proto Local Address Foreign Address State
TCP an0rex1c-351dz8:epmap an0rex1c-351dz8:0 LISTENING
TCP an0rex1c-351dz8:microsoft-ds an0rex1c-351dz8:0 LISTENING
TCP an0rex1c-351dz8:1025 an0rex1c-351dz8:0 LISTENING
TCP an0rex1c-351dz8:1026 an0rex1c-351dz8:0 LISTENING
TCP an0rex1c-351dz8:1028 an0rex1c-351dz8:0 LISTENING
TCP an0rex1c-351dz8:1673 an0rex1c-351dz8:0 LISTENING
TCP an0rex1c-351dz8:1713 an0rex1c-351dz8:0 LISTENING
TCP an0rex1c-351dz8:1717 an0rex1c-351dz8:0 LISTENING
TCP an0rex1c-351dz8:1753 an0rex1c-351dz8:0 LISTENING
TCP an0rex1c-351dz8:3941 an0rex1c-351dz8:0 LISTENING
UDP an0rex1c-351dz8:epmap *:*
UDP an0rex1c-351dz8:microsoft-ds *:*
UDP an0rex1c-351dz8:1027 *:*
UDP an0rex1c-351dz8:2319 *:*
UDP an0rex1c-351dz8:netbios-ns *:*
UDP an0rex1c-351dz8:netbios-dgm *:*
UDP an0rex1c-351dz8:isakmp *:*
-
I say no It all looks normal to me, but then again im not the smartest person in the world.... *lol* :D
System_0verload
-
I think it is just talking to itself, like all good little computers do (got the straightjacket ready yet, Jim?). Yep, just like normal...
-
You may have some spyware on your computer..... What your seeing might be you computer transfering data to someone...... Spooky stuff :eek:
System_0verload
-
Nah, I do daily spyware scans... I dont think its an option :)
-
What kinda programs were u runing when u got thouse conections? J/W cuz if I close all my app in the backgound as u would think I have no conections. But when I run a browser and IM'er my conections start to look like urs. U didn't have any esablished conections so that would elimante it being a trojan or a app sending data at that moment...i think.. oh well
-
Those connections are always active....
Hmmm, Im gonna try to disable all not necisarry processes and try it again :)
-
let me know what happens :)
-
Well, I shut down all non-essential programs and it was the same ****... The only reason im worried is becaise some ports are set up to accept all incoming connections (all UDP) Hmm, as soon as I kick my bro off of ICS I will get a few good firewalls and that will be the end of that... Thanks for your help everyone! It is greatly appreciated :)
-
I had a very similar problem before ac1d... don't know why I'm posting this, but yeh... :-/
-
netstat will list your network connection, but
http://www.foundstone.com/
has a free tool called fport that maps these ports to the listening processes.
it will make you feel alot better when you actually know what these listening things are listeming for
FPort v1.33 - TCP/IP Process to Port Mapper
Copyright 2000 by Foundstone, Inc.
http://www.foundstone.com
Pid Process Port Proto Path
644 tcpsvcs -> 7 TCP C:\WINNT\System32\tcpsvcs.exe
644 tcpsvcs -> 9 TCP C:\WINNT\System32\tcpsvcs.exe
644 tcpsvcs -> 13 TCP C:\WINNT\System32\tcpsvcs.exe
644 tcpsvcs -> 17 TCP C:\WINNT\System32\tcpsvcs.exe
644 tcpsvcs -> 19 TCP C:\WINNT\System32\tcpsvcs.exe
848 inetinfo -> 80 TCP C:\WINNT\System32\inetsrv\inetinfo.exe
392 svchost -> 135 TCP C:\WINNT\system32\svchost.exe
8 System -> 139 TCP
848 inetinfo -> 443 TCP C:\WINNT\System32\inetsrv\inetinfo.exe
8 System -> 445 TCP
616 MSTask -> 1025 TCP C:\WINNT\system32\MSTask.exe
8 System -> 1027 TCP
848 inetinfo -> 1028 TCP C:\WINNT\System32\inetsrv\inetinfo.exe
644 tcpsvcs -> 7 UDP C:\WINNT\System32\tcpsvcs.exe
644 tcpsvcs -> 9 UDP C:\WINNT\System32\tcpsvcs.exe
644 tcpsvcs -> 13 UDP C:\WINNT\System32\tcpsvcs.exe
644 tcpsvcs -> 17 UDP C:\WINNT\System32\tcpsvcs.exe
644 tcpsvcs -> 19 UDP C:\WINNT\System32\tcpsvcs.exe
392 svchost -> 135 UDP C:\WINNT\system32\svchost.exe
8 System -> 137 UDP
8 System -> 138 UDP
8 System -> 445 UDP
228 lsass -> 500 UDP C:\WINNT\system32\lsass.exe
208 services -> 1026 UDP C:\WINNT\system32\services.exe
1116 IEXPLORE -> 1038 UDP C:\Program Files\Internet Explorer\IEXPLORE.EXE
1176 IEXPLORE -> 1080 UDP C:\Program Files\Internet Explorer\IEXPLORE.EXE
848 inetinfo -> 3456 UDP C:\WINNT\System32\inetsrv\inetinfo.exe
1228 MsgSys -> 38037 UDP C:\WINNT\System32\MsgSys.EXE
