Is this a normal amount of ports to be open?
Started by
ingenioushax
, May 11 2010 12:41 PM
#1
Posted 11 May 2010 - 12:41 PM
#2
Posted 11 May 2010 - 01:06 PM
Provide a screen of a netstat -b from the cmd line please.
Judging by the page you have open in FF, if you are concerned about malware please visit the malware forum.
Judging by the page you have open in FF, if you are concerned about malware please visit the malware forum.
#3
Posted 11 May 2010 - 01:10 PM
Microsoft Windows [Version 6.0.6002]
Copyright © 2006 Microsoft Corporation. All rights reserved.
C:\Users\Mysterious>netstat -b
Active Connections
Proto Local Address Foreign Address State
TCP 127.0.0.1:30606 Mystery:50540 ESTABLISHED
[ekrn.exe]
TCP 127.0.0.1:30606 Mystery:50542 TIME_WAIT
TCP 127.0.0.1:30606 Mystery:50544 ESTABLISHED
[ekrn.exe]
TCP 127.0.0.1:30606 Mystery:50548 ESTABLISHED
[ekrn.exe]
TCP 127.0.0.1:30606 Mystery:50550 TIME_WAIT
TCP 127.0.0.1:30606 Mystery:50552 FIN_WAIT_2
[ekrn.exe]
TCP 127.0.0.1:30606 Mystery:50554 TIME_WAIT
TCP 127.0.0.1:30606 Mystery:50556 ESTABLISHED
[ekrn.exe]
TCP 127.0.0.1:49992 Mystery:49993 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:49993 Mystery:49992 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:49998 Mystery:49999 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:49999 Mystery:49998 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:50538 Mystery:30606 TIME_WAIT
TCP 127.0.0.1:50540 Mystery:30606 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:50544 Mystery:30606 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:50546 Mystery:30606 TIME_WAIT
TCP 127.0.0.1:50548 Mystery:30606 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:50552 Mystery:30606 CLOSE_WAIT
[firefox.exe]
TCP 127.0.0.1:50556 Mystery:30606 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:50558 Mystery:30606 TIME_WAIT
TCP 192.168.1.3:49157 bos-m032c-sdr4:https ESTABLISHED
[aim.exe]
TCP 192.168.1.3:49158 oam-d05c:https ESTABLISHED
[aim.exe]
TCP 192.168.1.3:50541 lax04s01-in-f100:http ESTABLISHED
[ekrn.exe]
TCP 192.168.1.3:50545 translator:http ESTABLISHED
[ekrn.exe]
TCP 192.168.1.3:50549 98.174.31.177:http ESTABLISHED
[ekrn.exe]
TCP 192.168.1.3:50557 98.174.31.210:http ESTABLISHED
[ekrn.exe]
C:\Users\Mysterious>
Nah, I had something the other day I was trying to get rid of, an Olmarik trojan, got it removed, I was just following up on my previous post.
Copyright © 2006 Microsoft Corporation. All rights reserved.
C:\Users\Mysterious>netstat -b
Active Connections
Proto Local Address Foreign Address State
TCP 127.0.0.1:30606 Mystery:50540 ESTABLISHED
[ekrn.exe]
TCP 127.0.0.1:30606 Mystery:50542 TIME_WAIT
TCP 127.0.0.1:30606 Mystery:50544 ESTABLISHED
[ekrn.exe]
TCP 127.0.0.1:30606 Mystery:50548 ESTABLISHED
[ekrn.exe]
TCP 127.0.0.1:30606 Mystery:50550 TIME_WAIT
TCP 127.0.0.1:30606 Mystery:50552 FIN_WAIT_2
[ekrn.exe]
TCP 127.0.0.1:30606 Mystery:50554 TIME_WAIT
TCP 127.0.0.1:30606 Mystery:50556 ESTABLISHED
[ekrn.exe]
TCP 127.0.0.1:49992 Mystery:49993 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:49993 Mystery:49992 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:49998 Mystery:49999 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:49999 Mystery:49998 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:50538 Mystery:30606 TIME_WAIT
TCP 127.0.0.1:50540 Mystery:30606 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:50544 Mystery:30606 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:50546 Mystery:30606 TIME_WAIT
TCP 127.0.0.1:50548 Mystery:30606 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:50552 Mystery:30606 CLOSE_WAIT
[firefox.exe]
TCP 127.0.0.1:50556 Mystery:30606 ESTABLISHED
[firefox.exe]
TCP 127.0.0.1:50558 Mystery:30606 TIME_WAIT
TCP 192.168.1.3:49157 bos-m032c-sdr4:https ESTABLISHED
[aim.exe]
TCP 192.168.1.3:49158 oam-d05c:https ESTABLISHED
[aim.exe]
TCP 192.168.1.3:50541 lax04s01-in-f100:http ESTABLISHED
[ekrn.exe]
TCP 192.168.1.3:50545 translator:http ESTABLISHED
[ekrn.exe]
TCP 192.168.1.3:50549 98.174.31.177:http ESTABLISHED
[ekrn.exe]
TCP 192.168.1.3:50557 98.174.31.210:http ESTABLISHED
[ekrn.exe]
C:\Users\Mysterious>
Nah, I had something the other day I was trying to get rid of, an Olmarik trojan, got it removed, I was just following up on my previous post.
#4
Posted 11 May 2010 - 09:28 PM
I dont see anything malicious based on your output.
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users