Ad: Download FREE Network Management Software from Spiceworks

Networking Discussion Thread
Unsolved
Views: 5787

Feb 26th, 2007

Weird connections when using netstat

Expand Post »

My internet connection has been going pretty slow lately. I've scanned for viruses and spyware but didn't find anything. So anyway I came across something that concerns me a little bit. I used netstat -o to view established connections and there's some open for weird things like this for example:

TCP michael-desktop:1715 downloads.aaa1screensavers.com:1716 ESTABLISHED 3084

I am of course a little suspicious of these. They all seem to have the same PID as well. On Windows though I don't know how to look up which process is assigned to which PID. Does this look like malware to anyone else? How can I find more information on this process and removing it? Also, would it be reasonable to assume that this is causing slowdown? There are 7 of these "weird" connections open.

Last edited by mps727; Feb 26th, 2007 at 8:12 pm.

Similar Threads

Solid hard drive light, no beep, no bios, no boot, weird odor in Troubleshooting Dead Machines
"No more connections can be made..." Error after years of normal function in Windows NT / 2000 / XP
One way ping problem in Networking
Unneeded outgoing connections - Tiny Personal Firewall issue in Windows NT / 2000 / XP

mps727

Reputation Points: 10

Solved Threads: 0

Junior Poster in Training

Offline

68 posts
since Nov 2006

Permalink

Feb 27th, 2007

Re: Weird connections when using netstat

Also, I think I forgot to make it clear, but I was wondering for future reference how to find out what process is assigned to the PID so I can determine what is establishing the connection.

mps727

Reputation Points: 10

Solved Threads: 0

Junior Poster in Training

Offline

68 posts
since Nov 2006

Permalink

Feb 27th, 2007

Re: Weird connections when using netstat

plug out the network cable for few minutes, and replug and see if the program is still running, the process is using port 1715, so either block the port or find out the process and kill it

ithelp

Reputation Points: 769

Solved Threads: 128

Banned

Offline

1,910 posts
since May 2006

Permalink

Mar 8th, 2007

Re: Weird connections when using netstat

if you want to block the connected url permanently, you can enter it into the hosts file, with an ip of 127.0.0.1
that way any malware/spyware won't be able to find it and connect to it

DimaYasny

Moderator

Featured Poster

Reputation Points: 183

Solved Threads: 89

Posting Virtuoso

Offline

1,772 posts
since Jan 2007

Permalink

Mar 8th, 2007

Re: Weird connections when using netstat

if you want to block the connected url permanently, you can enter it into the hosts file, with an ip of 127.0.0.1
that way any malware/spyware won't be able to find it and connect to it

DimaYasny

Moderator

Featured Poster

Reputation Points: 183

Solved Threads: 89

Posting Virtuoso

Offline

1,772 posts
since Jan 2007

Permalink

Mar 8th, 2007

Re: Weird connections when using netstat

damn, that was a glitch in the matrix
sorry mods, please erase the extra posts

thanks )

DimaYasny

Moderator

Featured Poster

Reputation Points: 183

Solved Threads: 89

Posting Virtuoso

Offline

1,772 posts
since Jan 2007

Permalink

Dec 29th, 2007

Re: Weird connections when using netstat

Especialy good when you notice your internet running continously when you havn' even opend a window yet !!

Start
Run
Type 'cmd'
Type 'netstat'
You will see the strange connection name & ip
If you cant find the ip number type 'nslookup (domain name)' then enter
Once you got Ip and domain name install X-Netstat a free software that can kill and monitor those connections.
Open the program and click refresh, find the connection through the ip or domain name you have and kill it (Kill button).

BUT

Depending on the trojen or whatever the case may be it can come back, annoying.

Under the process section you can see the processes name, remember it.
Press Ctrl+Alt+Dlt
Click Processes tab
Find it and kill

Problem solved

Back to Sleep

XTRM

Reputation Points: 10

Solved Threads: 0

Newbie Poster

Offline

1 posts
since Dec 2007

Permalink

Dec 30th, 2007

Re: Weird connections when using netstat

tips:
try removing startup items...
update your antivirus/spyware
check with the firewall settings...

Regards,
Pappu R.

pappuravi80

Reputation Points: 10

Solved Threads: 1

Newbie Poster

Offline

7 posts
since Dec 2007

Permalink

Jan 16th, 2008

Re: Weird connections when using netstat

first of all change your anti virus system
it's a spam it generally happens with poor anti virus protection so get a new anti virus and get a rescan i hope the problem will be resolved

darsh999

Reputation Points: 10

Solved Threads: 3

Junior Poster in Training

Offline

55 posts
since Oct 2007

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.

Previous Thread in Networking Forum Timeline: Internet Connection drops intermittently

Next Thread in Networking Forum Timeline: No Internet connection, Network Adapter Failed

DaniWeb Message

Cancel Changes

User Name
Password