tcpview unknown connection - 未名空间MITBBS历史存档

国际科技财经博客移民网络热点娱乐民生时事公众号

Redian新闻

>未名空间

>Security - 系统安全

tcpview unknown connection

tcpview unknown connection# Security - 系统安全

s*n2003-08-26 07:08

1 楼

Hi, I am using Windows XP professional. I found some unkonw connections by
tcpview as
svchost.exe:1132 TCP mycomputer:1187 xxx.xxx.xxx.xxx:http CLOSE_WAIT
Does it mean any security problem on my machine? What does the status of
"CLOSE_WAIT" mean?

y*t2003-08-26 07:08

2 楼

which means you have visited xxx site recently.
if that xxx site is not XXX site, you should not worry, hoho....

CLOSE_WAIT

【在 s**n 的大作中提到】

: Hi, I am using Windows XP professional. I found some unkonw connections by
: tcpview as
: svchost.exe:1132 TCP mycomputer:1187 xxx.xxx.xxx.xxx:http CLOSE_WAIT
: Does it mean any security problem on my machine? What does the status of
: "CLOSE_WAIT" mean?

s*n2003-08-26 07:08

3 楼

But the site is definitely somewhere I never visited and it looks so strange.
Does that mean somebody is using my machine?

【在 y****t 的大作中提到】

: which means you have visited xxx site recently.
: if that xxx site is not XXX site, you should not worry, hoho....
:
: CLOSE_WAIT

T*r2003-08-26 07:08

4 楼

http://www.netsys.com/cgi-bin/man2html?netstat(1M)

【在 s**n 的大作中提到】

s*n2003-08-26 07:08

5 楼

Thank you for letting me know the netstat. I used to use it but I think
tcpview is a better software giving me all connections in my XP box more
clearly. The problem is I found unknown connections to unknown address with
the process of svchost.exe. And I just found it became established. I am
wondering that something is wrong with my XP box.

CLOSE_WAIT

【在 T********r 的大作中提到】

:
: http://www.netsys.com/cgi-bin/man2html?netstat(1M)

y*t2003-08-26 07:08

6 楼

1)virus scan it might not be surprise if you found couple.
2)or, maybe you have some ad-ware installed unconciously?

by

【在 s**n 的大作中提到】

: Thank you for letting me know the netstat. I used to use it but I think
: tcpview is a better software giving me all connections in my XP box more
: clearly. The problem is I found unknown connections to unknown address with
: the process of svchost.exe. And I just found it became established. I am
: wondering that something is wrong with my XP box.
:
: CLOSE_WAIT