Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Wifi intruders?


  • Please log in to reply
2 replies to this topic

#1 Tomcp

Tomcp

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:07:17 PM

Posted 05 May 2016 - 01:56 AM

Is there anything fishy with this netstat report?

 

 

Active Connections
 
  Proto  Local Address          Foreign Address        State
  TCP    0.0.0.0:135            Lenovo-PC:0            LISTENING
  TCP    0.0.0.0:445            Lenovo-PC:0            LISTENING
  TCP    0.0.0.0:5357           Lenovo-PC:0            LISTENING
  TCP    0.0.0.0:49152          Lenovo-PC:0            LISTENING
  TCP    0.0.0.0:49153          Lenovo-PC:0            LISTENING
  TCP    0.0.0.0:49154          Lenovo-PC:0            LISTENING
  TCP    0.0.0.0:49155          Lenovo-PC:0            LISTENING
  TCP    0.0.0.0:49157          Lenovo-PC:0            LISTENING
  TCP    0.0.0.0:49159          Lenovo-PC:0            LISTENING
  TCP    0.0.0.0:50123          Lenovo-PC:0            LISTENING
  TCP    127.0.0.1:515          Lenovo-PC:0            LISTENING
  TCP    127.0.0.1:23401        Lenovo-PC:0            LISTENING
  TCP    127.0.0.1:43227        Lenovo-PC:0            LISTENING
  TCP    127.0.0.1:49330        Lenovo-PC:49331        ESTABLISHED
  TCP    127.0.0.1:49331        Lenovo-PC:49330        ESTABLISHED
  TCP    192.168.1.48:139       Lenovo-PC:0            LISTENING
  TCP    192.168.1.48:50542     msnbot-65-52-108-212:https  ESTABLISHED
  TCP    192.168.1.48:50547     a23-216-11-57:http     CLOSE_WAIT
  TCP    192.168.1.48:50548     a23-216-11-57:http     CLOSE_WAIT
  TCP    192.168.1.48:50560     yk-in-f188:5228        ESTABLISHED
  TCP    192.168.1.48:50623     ec2-107-20-211-74:https  CLOSE_WAIT
  TCP    192.168.1.48:50626     68-114-188-72:imaps    ESTABLISHED
  TCP    192.168.1.48:50652     74.125.138.147:https   TIME_WAIT
  TCP    192.168.1.48:50655     yk-in-f155:https       TIME_WAIT
  TCP    192.168.1.48:50659     yv-in-f95:http         ESTABLISHED
  TCP    192.168.1.48:50668     a23-212-36-57:http     ESTABLISHED
  TCP    192.168.1.48:50671     199.27.79.68:http      ESTABLISHED
  TCP    192.168.1.48:50672     yk-in-f138:https       TIME_WAIT
  TCP    192.168.1.48:50673     a23-212-36-57:http     ESTABLISHED
  TCP    192.168.1.48:50674     a23-212-36-57:http     ESTABLISHED
  TCP    192.168.1.48:50675     a23-212-36-57:http     ESTABLISHED
  TCP    192.168.1.48:50676     a23-212-36-57:http     ESTABLISHED
  TCP    192.168.1.48:50677     a23-212-36-57:http     ESTABLISHED
  TCP    192.168.1.48:50678     a23-212-36-57:http     ESTABLISHED
  TCP    192.168.1.48:50683     yx-in-f139:https       ESTABLISHED
  TCP    192.168.1.48:50688     yb-in-f102:https       ESTABLISHED
  TCP    192.168.1.48:50711     199.27.79.133:https    ESTABLISHED
  TCP    192.168.1.48:50715     yk-in-f106:https       ESTABLISHED
  TCP    192.168.1.48:50716     vgn-lb:http            ESTABLISHED
  TCP    192.168.1.48:50729     users:http             ESTABLISHED
  TCP    192.168.1.48:50730     vgn-lb:http            ESTABLISHED
 


BC AdBot (Login to Remove)

 


#2 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:07:17 PM

Posted 05 May 2016 - 04:51 PM

No seeing anything.  If you think you have wifi intruders they wouldn't be showing up in a netstat report



#3 Tomcp

Tomcp
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:07:17 PM

Posted 05 May 2016 - 11:02 PM

OK, thank you. I had a malware alert I saw out of the corner of my eye as it was going away so I ran Malwarebytes. It hung at the pre-scan until I disabled Scan for Rootkits. It didn't find anything, but I ran it again with rootkits enabled and it went ok, but didn't find anything. I ran ADW Cleaner and it did find something.It rebooted and hung at the Acer screen until I set the bios to defaults and then booted. I rebooted again and it went fine. I ran netstat and Googled a couple things in the list and thought they sounded strange so, I asked. Thanks again.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users