What's opening these connections?

H

Harry

Not sure what group this should be posted to so appologies in advance!

Running ie 5.5 (sp2)

I wonder if anybody can shed some light on this problem. My PC seems to be
opening connections randomly to various port no's

Some netstat results (p1900 is name of my PC as if you wouldn't know that
anyway!) -

So after system reboot -

Active Connections

Proto Local Address Foreign Address State

After reboot & One browser window open at www.google.com

Active Connections

Proto Local Address Foreign Address State
TCP p1900:1027 p1900:1031 ESTABLISHED
TCP p1900:1027 p1900:1034 ESTABLISHED
TCP p1900:1031 p1900:1027 ESTABLISHED
TCP p1900:1034 p1900:1027 ESTABLISHED
TCP p1900:1032 66.102.11.99:http ESTABLISHED
TCP p1900:1035 216.239.59.104:http ESTABLISHED

Port no's are not always consistant, for example close & reopen browser -

Active Connections

Proto Local Address Foreign Address State
TCP p1900:1027 p1900:1039 ESTABLISHED
TCP p1900:1027 p1900:1041 ESTABLISHED
TCP p1900:1039 p1900:1027 ESTABLISHED
TCP p1900:1041 p1900:1027 ESTABLISHED
TCP p1900:1040 66.102.11.99:http ESTABLISHED
TCP p1900:1042 216.239.59.104:http ESTABLISHED

I have no idea why? - closing anti-virus (pc-cillin + firewall), spyweeper &
anything else network related i.e Oracle, doesn't make any difference!

System has been virus checked, de-spywared loads of times so it's highly
unlikely its one of those?

Please has anyone any ideas as to what might be causing this?

many thanks

harry
 
S

Steven Umbach

Basically your computer is connected to itself in the first four lines which is
normal in the way networking applications may work, but of course unwanted
applications could do the same, and it is connected to two websites in the last
two lines. To find out more info on what process/applications are using those
ports, download TCPView which is free from SysInternals. Of course use other
precautions for safe internet access as described in MS link below. --- Steve

https://www.microsoft.com/security/protect/
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

TCP 1027 and Exosee 0
Does anyone know what this is? 1
What is working here? 4
Connection exists on my PC for what seems to be an ads site!! 1
my system is infected 1
Background Intelligent Transfer Service, Possible Security Hole? 1
Windows Ports 4
been hacked, tlntsvr.exe cannot be shutdown 4

Top