WARNING: This is an Archive - Try the New TestMy.net
Home
 
Welcome, Guest. Please login or register.

 
  spcr
» Home » Netstat weirdness
    
  Home    Help    Search    Login    Register  
 
News : Before you post... try a Why don't you search? - Many simple questions have already been answered.  If your query turns up dry then post, we always have people waiting for your questions. azn May 24, 2012, 06:38:39 AM
old.testmy.net forums  |  Main Forum  |  HELP!  |  HELP! With Other Stuff  |  Topic: Netstat weirdness Advanced search
  0 Members and 1 Guest are viewing this topic. « previous next »
Pages 1 Go Down
Author
Topic: Netstat weirdness  (Read 1897 times)
RTB
Dead but Alive
Global Moderator
TMN Veteran
*
Offline Offline

Gender: Male
Posts: 1932


I'm so evil, I'm hiding half my face from you.


View Profile
« on: August 05, 2004, 04:00:25 AM »

After having no internet for the last 36 hours on the old comp, it finally works again. But this time I tried using netstat. Is this good?

Actieve verbindingen

  Proto  Lokaal adres          Extern adres        Status
  TCP    R:...     .               www.altnet.com:....    ESTABLISHED
  TCP    R:....                 www.altnet.com:....    ESTABLISHED

Because somehow... I doubt it is. And if it's spyware, I'm going to need something new, cuz AVG, Spybot and Ad-aware couldn't find any program/virus/spyware.
Logged

Quote from: Scud
The other day, in the park, I was wondering why frisbees look bigger and bigger as they get closer to you

And then it hit me

Click me. Or be diminished; one by one.
 
Swimmer
Vice Admin
TMN Seasoned Veteran
*
Offline Offline

Gender: Male
Posts: 6373



View Profile
« Reply #1 on: August 05, 2004, 07:13:15 PM »

I cant read that language... please translate that for me..
Logged

 
RTB
Dead but Alive
Global Moderator
TMN Veteran
*
Offline Offline

Gender: Male
Posts: 1932


I'm so evil, I'm hiding half my face from you.


View Profile
« Reply #2 on: August 05, 2004, 09:54:37 PM »

literally translated:

Actieve verbindingen = active connections

Proto Lokaal adres Extern adres Status
Protocol Local address External address Status
Logged

Quote from: Scud
The other day, in the park, I was wondering why frisbees look bigger and bigger as they get closer to you

And then it hit me

Click me. Or be diminished; one by one.
 
Swimmer
Vice Admin
TMN Seasoned Veteran
*
Offline Offline

Gender: Male
Posts: 6373



View Profile
« Reply #3 on: August 06, 2004, 08:05:36 PM »

Those programs are connecting to a server...

they are using ports 1032 and 5226...   Altnet.com is some type of digtial media distributer...

Quote
Altnet is the leading online distributor of licensed digital entertainment, enabling its roster of record labels, film studios, and software and video game developers to market and sell their media to a worldwide audience of 70 million users. Altnet powers leading Peer-to-Peer applications, internet portals and affiliate websites with turnkey access to Altnet’s library of rights managed downloadable content and integrated payment processing gateway.


are you running some type of download that expires at a certain time??  mp3,mpeg, any type of media...  My guess is that it is just communicating with the server to figure out what date you installed it and what date it becomes un-playable...   I dont like this at all!!!  i would recommend that you close those ports on your router... you are just asking for an attack through those open ports.. you might want to try the security scan over at dslreports just to see if you are at risk... Rolling Eyes
Logged

 
RTB
Dead but Alive
Global Moderator
TMN Veteran
*
Offline Offline

Gender: Male
Posts: 1932


I'm so evil, I'm hiding half my face from you.


View Profile
« Reply #4 on: August 07, 2004, 01:37:39 AM »

Quote from: Swimmer
are you running some type of download that expires at a certain time??  mp3,mpeg, any type of media...  My guess is that it is just communicating with the server to figure out what date you installed it and what date it becomes un-playable...   I dont like this at all!!!


I have Kazaa lite installed, but nothing should be running now. I think it's bad too.

Quote
i would recommend that you close those ports on your router... you are just asking for an attack through those open ports.. you might want to try the security scan over at dslreports just to see if you are at risk... Rolling Eyes


I have no access to the router, and never will.

Port scan @ dslreports claimed it was safe.
Not doing the slow scan, it needs too much information imo.
Logged

Quote from: Scud
The other day, in the park, I was wondering why frisbees look bigger and bigger as they get closer to you

And then it hit me

Click me. Or be diminished; one by one.
 
RTB
Dead but Alive
Global Moderator
TMN Veteran
*
Offline Offline

Gender: Male
Posts: 1932


I'm so evil, I'm hiding half my face from you.


View Profile
« Reply #5 on: August 07, 2004, 01:48:44 AM »

Did the port scan @ grc.com (i really advice this website to anyone wanting to test their ports), and found out that they're stealthed, but one port is named: HP Status.
The other is called iad3, or BBN IAD. According to some website Google found, it's the loopback interface.

Conclusion: I hate HP spyware.

Result: HP spyware annihilated. It won't get internet access ever again. Netstat showed no active connections after this.

Problem solved.
Logged

Quote from: Scud
The other day, in the park, I was wondering why frisbees look bigger and bigger as they get closer to you

And then it hit me

Click me. Or be diminished; one by one.
 
Print  Pages 1 Go Up
old.testmy.net forums  |  Main Forum  |  HELP!  |  HELP! With Other Stuff  |  Topic: Netstat weirdness « previous next »
Jump to:  

    


 

 

 

© 2007 testmy.net - Contact - Legal - This is an older version: Try Bandwidth Speed Test v12