Netstat

Biohazard · 23 Apr 2008 at 17:40

If I am showing several listening TCP connections after typing netstat -a in command prompt is that a good indicator for malware/spyware?

ps: didn't know if to put it here or networking.. :/

Double double edit. Answered my own question, its riddled.

/End

Biohazard · 24 Apr 2008 at 19:09

Hmm on a fresh install they are still there.. is this normal?

I can give a screenie, perhaps it would be better if this were moved to networking.

Biohazard · 24 Apr 2008 at 21:02

This was with no software running other than system processes (hadn't even downloaded MSN). Basically after SP3 and updates I re-installed the NIC drivers and went to the command prompt.. still there.

Cheers Dist I will do that, if not I'll have to come back with a screenie I'm afraid!

Thanks guys

Biohazard · 24 Apr 2008 at 21:20

Can you see how I am getting confused?

Now I know how to close down microsoft-ds (port 445/tcp) in the registry.

What on earth, if anything, can I do about the netbios-ssn (port 139/tcp)?

May I know what is epmap (port 135) used for?

:confused:

pah

Biohazard · 25 Apr 2008 at 10:50

So what if any should I keep open?