Tech Support Forum - View Single Post - Trojan/Malware suspected in openining ports

Pansy · 10-02-2008, 03:22 PM

Here is an updated port listing of my PC. Thanks for looking.

Active Connections

Proto Local Address Foreign Address State
TCP pc_name:epmap pc_name:0 LISTENING
TCP pc_name:microsoft-ds pc_name:0 LISTENING
TCP pc_name:1026 pc_name:0 LISTENING
TCP pc_name:1833 localhost:31595 TIME_WAIT
TCP pc_name:1836 localhost:31595 TIME_WAIT
TCP pc_name:1870 localhost:31595 ESTABLISHED
TCP pc_name:1886 localhost:31595 ESTABLISHED
TCP pc_name:1915 localhost:31595 ESTABLISHED
TCP pc_name:1917 localhost:31595 ESTABLISHED
TCP pc_name:1919 localhost:31595 ESTABLISHED
TCP pc_name:1930 localhost:31595 TIME_WAIT
TCP pc_name:1935 localhost:31595 ESTABLISHED
TCP pc_name:1938 localhost:31595 ESTABLISHED
TCP pc_name:1940 localhost:31595 ESTABLISHED
TCP pc_name:31595 pc_name:0 LISTENING
TCP pc_name:31595 localhost:1863 TIME_WAIT
TCP pc_name:31595 localhost:1865 TIME_WAIT
TCP pc_name:31595 localhost:1870 ESTABLISHED
TCP pc_name:31595 localhost:1875 TIME_WAIT
TCP pc_name:31595 localhost:1877 TIME_WAIT
TCP pc_name:31595 localhost:1879 TIME_WAIT
TCP pc_name:31595 localhost:1882 TIME_WAIT
TCP pc_name:31595 localhost:1886 ESTABLISHED
TCP pc_name:31595 localhost:1892 TIME_WAIT
TCP pc_name:31595 localhost:1894 TIME_WAIT
TCP pc_name:31595 localhost:1897 TIME_WAIT
TCP pc_name:31595 localhost:1900 TIME_WAIT
TCP pc_name:31595 localhost:1904 TIME_WAIT
TCP pc_name:31595 localhost:1907 TIME_WAIT
TCP pc_name:31595 localhost:1909 TIME_WAIT
TCP pc_name:31595 localhost:1913 TIME_WAIT
TCP pc_name:31595 localhost:1915 ESTABLISHED
TCP pc_name:31595 localhost:1917 ESTABLISHED
TCP pc_name:31595 localhost:1919 ESTABLISHED
TCP pc_name:31595 localhost:1923 TIME_WAIT
TCP pc_name:31595 localhost:1928 TIME_WAIT
TCP pc_name:31595 localhost:1935 ESTABLISHED
TCP pc_name:31595 localhost:1938 ESTABLISHED
TCP pc_name:31595 localhost:1940 ESTABLISHED
TCP pc_name:netbios-ssn pc_name:0 LISTENING
TCP pc_name:1042 209-18-43-74.dfw10.tbone.rr.com:http CLOSE_WAIT

TCP pc_name:1825 205.203.131.55:http TIME_WAIT
TCP pc_name:1834 205.203.139.53:http TIME_WAIT
TCP pc_name:1837 205.203.139.53:http TIME_WAIT
TCP pc_name:1840 205.203.139.11:http TIME_WAIT
TCP pc_name:1859 69.7.234.203:http TIME_WAIT
TCP pc_name:1871 69.7.234.203:http ESTABLISHED
TCP pc_name:1887 206.132.122.18:http ESTABLISHED
TCP pc_name:1916 205.203.139.53:http ESTABLISHED
TCP pc_name:1918 205.203.139.53:http ESTABLISHED
TCP pc_name:1920 205.203.131.55:http ESTABLISHED
TCP pc_name:1931 he-in-f167.google.com:http TIME_WAIT
TCP pc_name:1936 205.203.131.55:http ESTABLISHED
TCP pc_name:1939 205.203.131.98:http ESTABLISHED
TCP pc_name:1941 205.203.131.98:http ESTABLISHED
UDP pc_name:microsoft-ds *:*
UDP pc_name:isakmp *:*
UDP pc_name:4500 *:*
UDP pc_name:ntp *:*
UDP pc_name:1031 *:*
UDP pc_name:1043 *:*
UDP pc_name:1900 *:*
UDP pc_name:18001 *:*
UDP pc_name:18002 *:*
UDP pc_name:44301 *:*
UDP pc_name:ntp *:*
UDP pc_name:netbios-ns *:*
UDP pc_name:netbios-dgm *:*
UDP pc_name:1900 *:*

10-02-2008, 03:22 PM	#4 (permalink)
Pansy Registered User Join Date: Sep 2008 Posts: 7 OS: XP	Re: Trojan/Malware suspected in openining ports Here is an updated port listing of my PC. Thanks for looking. Active Connections Proto Local Address Foreign Address State TCP pc_name:epmap pc_name:0 LISTENING TCP pc_name:microsoft-ds pc_name:0 LISTENING TCP pc_name:1026 pc_name:0 LISTENING TCP pc_name:1833 localhost:31595 TIME_WAIT TCP pc_name:1836 localhost:31595 TIME_WAIT TCP pc_name:1870 localhost:31595 ESTABLISHED TCP pc_name:1886 localhost:31595 ESTABLISHED TCP pc_name:1915 localhost:31595 ESTABLISHED TCP pc_name:1917 localhost:31595 ESTABLISHED TCP pc_name:1919 localhost:31595 ESTABLISHED TCP pc_name:1930 localhost:31595 TIME_WAIT TCP pc_name:1935 localhost:31595 ESTABLISHED TCP pc_name:1938 localhost:31595 ESTABLISHED TCP pc_name:1940 localhost:31595 ESTABLISHED TCP pc_name:31595 pc_name:0 LISTENING TCP pc_name:31595 localhost:1863 TIME_WAIT TCP pc_name:31595 localhost:1865 TIME_WAIT TCP pc_name:31595 localhost:1870 ESTABLISHED TCP pc_name:31595 localhost:1875 TIME_WAIT TCP pc_name:31595 localhost:1877 TIME_WAIT TCP pc_name:31595 localhost:1879 TIME_WAIT TCP pc_name:31595 localhost:1882 TIME_WAIT TCP pc_name:31595 localhost:1886 ESTABLISHED TCP pc_name:31595 localhost:1892 TIME_WAIT TCP pc_name:31595 localhost:1894 TIME_WAIT TCP pc_name:31595 localhost:1897 TIME_WAIT TCP pc_name:31595 localhost:1900 TIME_WAIT TCP pc_name:31595 localhost:1904 TIME_WAIT TCP pc_name:31595 localhost:1907 TIME_WAIT TCP pc_name:31595 localhost:1909 TIME_WAIT TCP pc_name:31595 localhost:1913 TIME_WAIT TCP pc_name:31595 localhost:1915 ESTABLISHED TCP pc_name:31595 localhost:1917 ESTABLISHED TCP pc_name:31595 localhost:1919 ESTABLISHED TCP pc_name:31595 localhost:1923 TIME_WAIT TCP pc_name:31595 localhost:1928 TIME_WAIT TCP pc_name:31595 localhost:1935 ESTABLISHED TCP pc_name:31595 localhost:1938 ESTABLISHED TCP pc_name:31595 localhost:1940 ESTABLISHED TCP pc_name:netbios-ssn pc_name:0 LISTENING TCP pc_name:1042 209-18-43-74.dfw10.tbone.rr.com:http CLOSE_WAIT TCP pc_name:1825 205.203.131.55:http TIME_WAIT TCP pc_name:1834 205.203.139.53:http TIME_WAIT TCP pc_name:1837 205.203.139.53:http TIME_WAIT TCP pc_name:1840 205.203.139.11:http TIME_WAIT TCP pc_name:1859 69.7.234.203:http TIME_WAIT TCP pc_name:1871 69.7.234.203:http ESTABLISHED TCP pc_name:1887 206.132.122.18:http ESTABLISHED TCP pc_name:1916 205.203.139.53:http ESTABLISHED TCP pc_name:1918 205.203.139.53:http ESTABLISHED TCP pc_name:1920 205.203.131.55:http ESTABLISHED TCP pc_name:1931 he-in-f167.google.com:http TIME_WAIT TCP pc_name:1936 205.203.131.55:http ESTABLISHED TCP pc_name:1939 205.203.131.98:http ESTABLISHED TCP pc_name:1941 205.203.131.98:http ESTABLISHED UDP pc_name:microsoft-ds : UDP pc_name:isakmp : UDP pc_name:4500 : UDP pc_name:ntp : UDP pc_name:1031 : UDP pc_name:1043 : UDP pc_name:1900 : UDP pc_name:18001 : UDP pc_name:18002 : UDP pc_name:44301 : UDP pc_name:ntp : UDP pc_name:netbios-ns : UDP pc_name:netbios-dgm : UDP pc_name:1900 :