端口被用光光, help - 未名空间MITBBS历史存档

国际科技财经博客移民网络热点娱乐民生时事公众号

Redian新闻

>未名空间

>Security - 系统安全

端口被用光光, help

端口被用光光, help# Security - 系统安全

w*r2003-06-06 07:06

1 楼

不知道是不是病毒,还是机器被黑了,我用电话线上网,有时候会发现网速特别慢,基本不动
,但是看connection的流量正常,用netstat -n 得到下面结果,只有从新开机才行,断开连
接再连都不行,在关机的时候,出现end programme的窗口,但实际我已关闭所有应用程序,
下面是netstat -n 结果:
Active Connections
Proto Local Address Foreign Address State
TCP 64.24.16.86:80 218.18.34.120:4296 CLOSE_WAIT
TCP 64.24.16.86:1026 64.85.115.215:80 SYN_SENT
TCP 64.24.16.86:1028 64.120.244.120:80 SYN_SENT
TCP 64.24.16.86:1030 64.184.120.13:80 SYN_SENT

c*d2003-06-06 07:06

2 楼

you are a slave

【在 w********r 的大作中提到】

: 不知道是不是病毒,还是机器被黑了,我用电话线上网,有时候会发现网速特别慢,基本不动
: ,但是看connection的流量正常,用netstat -n 得到下面结果,只有从新开机才行,断开连
: 接再连都不行,在关机的时候,出现end programme的窗口,但实际我已关闭所有应用程序,
: 下面是netstat -n 结果:
: Active Connections
: Proto Local Address Foreign Address State
: TCP 64.24.16.86:80 218.18.34.120:4296 CLOSE_WAIT
: TCP 64.24.16.86:1026 64.85.115.215:80 SYN_SENT
: TCP 64.24.16.86:1028 64.120.244.120:80 SYN_SENT
: TCP 64.24.16.86:1030 64.184.120.13:80 SYN_SENT

L*t2003-06-06 07:06

3 楼

Your computer might got Code Red or Code Red II virus (I guess). You should
use Norton to clean it and download patch file(s) from Microsoft.
Code Red is the original worm witch attacks IIS on win2k/nt machine. Code Red
II is a NEW worm that utilizes the Code Red infection mechanism. It
would plant a Trojan in your system so that your pc would be controlled
through HTTP request to your web server.