Active TCP Connections

Discussion in 'ESET Smart Security v3 Beta Forum' started by chemicalkicks, Aug 20, 2007.

Thread Status:
Not open for further replies.
  1. chemicalkicks

    chemicalkicks Registered Member

    Joined:
    Jun 3, 2007
    Posts:
    24
    Posted this in another Forum please read, any advise welcome.

    I just did the following.

    RUN > CMD > Netstat -n

    Over 100 active connections all TCP and im worried.

    EDIT: Did a better guess closer to 200+, no terrents running.

    Using ESS latest version, Spybot and PG.

    Ive only looked up a couple of the IP's so far, one was for Google HUH nothing was open before I ran the comand and I dont have the sidebar or anything like that.

    Another was for http://www.ripe.net/ agian who, why a connection?

    Does any think I may be heavily infected?
    ________________________________________________________________

    Another poster replied;

    run a netstat -b and see where the connections are coming from.

    ________________________________________________________________

    OK.

    Top 10 or so connections are ekrn.exe
    next 25 or so are firefox
    The 2 sources above are sourced at LivingRoom PC which is my PC name.

    The next 150 are all ekrn.exe and listed the majority are listed as http: but some have different sources like; mars:https, kr-in-f116:http, ns-vip3:http.

    Any ideas?

    EDIT: The IP is always 192.168.1.78:50975 running to :65028

    ________________________________________________________________

    Another poster replied:

    Ekrn.exe is part of ESS, why it's making that many connections I don't know though. Perhaps try posting here: https://www.wilderssecurity.com/forumdisplay.php?f=18 Seems to be the official support forum.

    _________________________________________________________________

    And now I ask your advise, is this normal, should I be worried?
     
  2. chemicalkicks

    chemicalkicks Registered Member

    Joined:
    Jun 3, 2007
    Posts:
    24
    BUMP

    Sorry for being impatient but over 100 connections is a concern for me.
     
  3. ASpace

    ASpace Guest

    I would suggest you restart your computer and with no browser or any other application started (CMD only) try again.

    Why you see such results (about ekrn.exe) , I can only guess . I think that since it is firefox and erkn only , you have nothing to worry about and you are less likely to be infected , really.
     
  4. chemicalkicks

    chemicalkicks Registered Member

    Joined:
    Jun 3, 2007
    Posts:
    24
    Thanks.

    I feel real stupid now, after restarting and running netstat...... 0 Connections.

    :)
     
  5. ASpace

    ASpace Guest

    :D :D

    Don't worry
     
Thread Status:
Not open for further replies.