PDA

View Full Version : Whats this about then?


Hamster
25-Nov-2003, 17:00
Right, just got me cable, seems to be getting a bit slow, so I ran start > command > netstat on it, and as well as ntl / telewest I seem to be connected to summat called discountasp.net, uk2.net and about eight other things?

Is this legit nad perfectly normal or have I picked up pile of trojans or similar?

No laughing at the noob btw, I'm crap with net stuff and I already know it.

: paranoia :

blurr
25-Nov-2003, 17:14
I have 6 connections with uk2net and 1 other I wouldn't worry about it... having said that I do have

TCP richard:1149 213.221.189.4:6667 ESTABLISHED

which I have no idea what that is...

moron
25-Nov-2003, 17:18
I'd guess the UK2 ones are this forum as thats where its hosted... And that 6667 one is IRC.. Looks like barrysworlds server.
And no, generally normal to have a load of connections running.. though if you're really concerned then paste the netstat and we'll try and decipher it :)

Hamster
25-Nov-2003, 17:19
Cheers Blurr, I'm clueless about intarweb stuff..:p

blurr
25-Nov-2003, 17:26
ahh the 6667 will be irc i'm guessing :)

oops hadn't fully read what you said moron

burundi
25-Nov-2003, 17:35
If in doubt close all your proggies that use t'internet and then give it 2 minutes and run netstat

if you still have loads of active connections download AdAware 6 from www.lavasoft.com and see if you do have any spyware on your pc.

You can also download the stinger utility from Mcafee to check for and remove specific trojans and viruses: http://vil.nai.com/vil/stinger/

Hamster
25-Nov-2003, 17:42
Cheers all, I always get paranoid about stuff I don't quite understand.."omG! HaX0rs!!" etc.

I already run Adaware, Spybot and AVG over it regular and they aint flagged anything up recently so probably fine.

burundi
25-Nov-2003, 17:44
Stinger is a useful utility to run every now and then as well. it checks and removes the most common trojans worms and viruses. The free version of AVG is allegedly not brilliant but better than nothing!

Matt
25-Nov-2003, 19:51
if you do "netstat -ano" it will give you useful information, including which pid is associated with which connection. You can then find out which app is using that connection (pid is process ID, each application has its own pid).