由买买提看人间百态

boards

本页内容为未名空间相应帖子的节选和存档,一周内的贴子最多显示50字,超过一周显示500字 访问原贴
Security版 - tcpview unknown connection
相关主题
我的机器遭人攻击了吗?windows1027端口是干什么的?
端口被用光光, help[转载] Re: 关于browser security的问题
IE是不是中招了?Is it true?
大家给看看是不是有问题?紧急求助---机器被侵入.
What after netstat?How to detect the IP?
无法上网,求救!why connect to prisoner.iania.org ?
Can't connect to InternetHelp on SSH
IP盗用[转载] 莫名其妙的断网(WIN2000, ETHERNET)
相关话题的讨论汇总
话题: tcpview话题: close话题: wait话题: unknown话题: xp
进入Security版参与讨论
1 (共1页)
s**n
发帖数: 33
1
Hi, I am using Windows XP professional. I found some unkonw connections by
tcpview as
svchost.exe:1132 TCP mycomputer:1187 xxx.xxx.xxx.xxx:http CLOSE_WAIT
Does it mean any security problem on my machine? What does the status of
"CLOSE_WAIT" mean?
y****t
发帖数: 10233
2
which means you have visited xxx site recently.
if that xxx site is not XXX site, you should not worry, hoho....

CLOSE_WAIT

【在 s**n 的大作中提到】
: Hi, I am using Windows XP professional. I found some unkonw connections by
: tcpview as
: svchost.exe:1132 TCP mycomputer:1187 xxx.xxx.xxx.xxx:http CLOSE_WAIT
: Does it mean any security problem on my machine? What does the status of
: "CLOSE_WAIT" mean?

s**n
发帖数: 33
3
But the site is definitely somewhere I never visited and it looks so strange.
Does that mean somebody is using my machine?

【在 y****t 的大作中提到】
: which means you have visited xxx site recently.
: if that xxx site is not XXX site, you should not worry, hoho....
:
: CLOSE_WAIT

T********r
发帖数: 6210
4

http://www.netsys.com/cgi-bin/man2html?netstat(1M)

【在 s**n 的大作中提到】
: Hi, I am using Windows XP professional. I found some unkonw connections by
: tcpview as
: svchost.exe:1132 TCP mycomputer:1187 xxx.xxx.xxx.xxx:http CLOSE_WAIT
: Does it mean any security problem on my machine? What does the status of
: "CLOSE_WAIT" mean?

s**n
发帖数: 33
5
Thank you for letting me know the netstat. I used to use it but I think
tcpview is a better software giving me all connections in my XP box more
clearly. The problem is I found unknown connections to unknown address with
the process of svchost.exe. And I just found it became established. I am
wondering that something is wrong with my XP box.

CLOSE_WAIT

【在 T********r 的大作中提到】
:
: http://www.netsys.com/cgi-bin/man2html?netstat(1M)

y****t
发帖数: 10233
6
1)virus scan it might not be surprise if you found couple.
2)or, maybe you have some ad-ware installed unconciously?

by

【在 s**n 的大作中提到】
: Thank you for letting me know the netstat. I used to use it but I think
: tcpview is a better software giving me all connections in my XP box more
: clearly. The problem is I found unknown connections to unknown address with
: the process of svchost.exe. And I just found it became established. I am
: wondering that something is wrong with my XP box.
:
: CLOSE_WAIT

1 (共1页)
进入Security版参与讨论
相关主题
[转载] 莫名其妙的断网(WIN2000, ETHERNET)What after netstat?
Help!!!!!!!!!!!!!!!!!!!!无法上网,求救!
reduce tcpdump to connection level.Can't connect to Internet
[转载] 求救!关于WinXP连NFS serverIP盗用
我的机器遭人攻击了吗?windows1027端口是干什么的?
端口被用光光, help[转载] Re: 关于browser security的问题
IE是不是中招了?Is it true?
大家给看看是不是有问题?紧急求助---机器被侵入.
相关话题的讨论汇总
话题: tcpview话题: close话题: wait话题: unknown话题: xp