netstat return huge list :(

Jul 05, 2009 3 Replies
T
netstat return huge list :( open original image

I think I seem to have a virus and have no idea how to remove it. On my computer it can connect to the internet and msn messenger works, however if i try to open ie or mozilla it just hangs and i cannot view any pages, although i can ping google.com etc and get a return. Also in cmd i typed netstat and a massive list is produced to the point where i cant even scroll to the top. It returns this.....



TCP thedealer:8085 localhost:1463 ESTABLISHED TCP thedealer:8085 localhost:1465 ESTABLISHED TCP thedealer:8085 localhost:1467 ESTABLISHED TCP thedealer:8085 localhost:1469 ESTABLISHED TCP thedealer:8085 localhost:1471 ESTABLISHED



etc...



Any help at this stage would be greatly appreciated. I have run a system scan with kaspersky and it found a few trojans that I then deleted however I still have the problem :( on was santa.exe, another connector.exe i think.... if that is relevant anyway.



Vote
Twitter Facebook LinkedIn
V

TCPview from SysInternals (now owned by Microsoft) will give you better information, like the local process that owns the socket.

Vote
Twitter Facebook LinkedIn
A

Run "netstat -an", not just plain netstat. If you see your computer's IP address in the second column and 127.0.0.1 instead of localhost in the third, then you probably don't need to worry about those connections. It's most likely a program doing IPC over TCP sockets on your local host.

Use TCPView [1] (run as administrator) to find out what processes are associated with each connection or open port.

If you already found that your system was infected with trojan horses, then [2] is your best option. The only reliable one to get a clean system, that is.

[1]
formatting link
formatting link
cu 59cobalt
Vote
Twitter Facebook LinkedIn
T

i guess the easiest thing to do is just wipe it clean and start again, thanks for the help. Appreciated.

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required