Notices
Computer & Technology Related Post here for help and discussion of computing and related technology. Internet, TVs, phones, consoles, computers, tablets and any other gadgets.

Windows Netstat

Thread Tools
 
Search this Thread
 
Old May 20, 2003 | 04:51 PM
  #1  
SiDHEaD's Avatar
SiDHEaD
Thread Starter
Scooby Regular
 
Joined: Apr 2002
Posts: 9,196
Likes: 0
From: Birmingham
Question

Is there a windows application which will show you the tcp/ip connections listening/connecting out, but also show you the process associated with it???

I've noticed on the works firewall that every minute my machine attempts to connect out to an IRC server.

I tried to connect to this server myself using mIRC, and the server in question said i was not privaledged to join.

Now, as i havent got any specific programs open which should be using irc, i'm a bit concerned that i may have some sort of virus/trojan that my AV isnt picking up.

Anyone know of a program which will show application is connecting where?

Andy
Reply
Old May 20, 2003 | 05:05 PM
  #2  
stevencotton's Avatar
stevencotton
Scooby Regular
 
Joined: Jan 2001
Posts: 2,710
Likes: 1
From: behind twin turbos
Post

If you have a process connecting to an IRC server then it's most definitely a virus/trojan you have there.
Reply
Old May 20, 2003 | 05:37 PM
  #3  
Andrewza's Avatar
Andrewza
Scooby Regular
 
Joined: Jan 2002
Posts: 667
Likes: 0
Post

netstat -o

if you're using XP (and possibly 2K), will give you the PID, which you can see in task manager by going to "view->select columns" and ticking "PID (Process Identifier)"

Reply
Old May 20, 2003 | 07:31 PM
  #4  
SiDHEaD's Avatar
SiDHEaD
Thread Starter
Scooby Regular
 
Joined: Apr 2002
Posts: 9,196
Likes: 0
From: Birmingham
Post

Cheers Andrew i'll give that a go!

Andy
Reply
Old May 20, 2003 | 07:56 PM
  #5  
ChristianR's Avatar
ChristianR
Scooby Regular
iTrader: (1)
 
Joined: May 2001
Posts: 6,329
Likes: 1
From: Europe
Post

do a search for eggdrop on your computer.
Reply
Old May 21, 2003 | 10:20 AM
  #6  
markr1963's Avatar
markr1963
Scooby Regular
 
Joined: Jun 2002
Posts: 1,866
Likes: 0
From: Perth, Western Australia
Post

Andy - YHM
Reply
Old May 21, 2003 | 10:32 AM
  #7  
zax's Avatar
zax
Scooby Regular
 
Joined: Jan 2002
Posts: 247
Likes: 0
Post

Have a go with this:

http://www.sysinternals.com/ntw2k/source/tcpview.shtml

...and it's friend:

http://www.sysinternals.com/ntw2k/freeware/tdimon.shtml

[Edited by zax - 5/21/2003 10:34:01 AM]
Reply
Old May 21, 2003 | 10:36 AM
  #8  
SiDHEaD's Avatar
SiDHEaD
Thread Starter
Scooby Regular
 
Joined: Apr 2002
Posts: 9,196
Likes: 0
From: Birmingham
Post

I've narrowed it down to an applet that was running in the background thru IE. So I reloaded IE and it seems to have gone away!! Have no idea what site it came off though!!


Cheers guys,

Andy
Reply
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
KAS35RSTI
Subaru
27
Nov 4, 2021 07:12 PM
Mattybr5@MB Developments
Full Cars Breaking For Spares
12
Nov 18, 2015 07:03 AM
hardcoreimpreza
Computer & Technology Related
21
Oct 11, 2015 03:40 PM
FuZzBoM
Wheels, Tyres & Brakes
16
Oct 4, 2015 09:49 PM
Ganz1983
Subaru
5
Oct 2, 2015 09:22 AM




All times are GMT +1. The time now is 04:38 AM.