Active TCP Connections

Discussion in 'ESET Smart Security v3 Beta Forum' started by chemicalkicks, Aug 20, 2007.

Thread Status:
Not open for further replies.
  1. chemicalkicks

    chemicalkicks Registered Member

    Joined:
    Jun 3, 2007
    Posts:
    24
    Posted this in another Forum please read, any advise welcome.

    I just did the following.

    RUN > CMD > Netstat -n

    Over 100 active connections all TCP and im worried.

    EDIT: Did a better guess closer to 200+, no terrents running.

    Using ESS latest version, Spybot and PG.

    Ive only looked up a couple of the IP's so far, one was for Google HUH nothing was open before I ran the comand and I dont have the sidebar or anything like that.

    Another was for http://www.ripe.net/ agian who, why a connection?

    Does any think I may be heavily infected?
    ________________________________________________________________

    Another poster replied;

    run a netstat -b and see where the connections are coming from.

    ________________________________________________________________

    OK.

    Top 10 or so connections are ekrn.exe
    next 25 or so are firefox
    The 2 sources above are sourced at LivingRoom PC which is my PC name.

    The next 150 are all ekrn.exe and listed the majority are listed as http: but some have different sources like; mars:https, kr-in-f116:http, ns-vip3:http.

    Any ideas?

    EDIT: The IP is always 192.168.1.78:50975 running to :65028

    ________________________________________________________________

    Another poster replied:

    Ekrn.exe is part of ESS, why it's making that many connections I don't know though. Perhaps try posting here: https://www.wilderssecurity.com/forumdisplay.php?f=18 Seems to be the official support forum.

    _________________________________________________________________

    And now I ask your advise, is this normal, should I be worried?
     
  2. chemicalkicks

    chemicalkicks Registered Member

    Joined:
    Jun 3, 2007
    Posts:
    24
    BUMP

    Sorry for being impatient but over 100 connections is a concern for me.
     
  3. ASpace

    ASpace Guest

    I would suggest you restart your computer and with no browser or any other application started (CMD only) try again.

    Why you see such results (about ekrn.exe) , I can only guess . I think that since it is firefox and erkn only , you have nothing to worry about and you are less likely to be infected , really.
     
  4. chemicalkicks

    chemicalkicks Registered Member

    Joined:
    Jun 3, 2007
    Posts:
    24
    Thanks.

    I feel real stupid now, after restarting and running netstat...... 0 Connections.

    :)
     
  5. ASpace

    ASpace Guest

    :D :D

    Don't worry
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.