好多連線?? - 資安

By Lauren
at 2004-10-13T01:22
at 2004-10-13T01:22
Table of Contents
我用命令提示字元看
------------------------------------------------------------------------------
C:\Documents and Settings\Administrator>NETSTAT -A
Active Connections
Proto Local Address Foreign Address State
TCP computer001:smtp computer001:0 LISTENING
TCP computer001:http computer001:0 LISTENING
TCP computer001:epmap computer001:0 LISTENING
TCP computer001:https computer001:0 LISTENING
TCP computer001:microsoft-ds computer001:0 LISTENING
TCP computer001:1025 computer001:0 LISTENING
TCP computer001:1026 computer001:0 LISTENING
TCP computer001:1028 computer001:0 LISTENING
TCP computer001:1030 computer001:0 LISTENING
TCP computer001:1460 computer001:0 LISTENING
TCP computer001:1466 computer001:0 LISTENING
TCP computer001:1529 computer001:0 LISTENING
TCP computer001:1706 computer001:0 LISTENING
TCP computer001:1724 computer001:0 LISTENING
TCP computer001:1752 computer001:0 LISTENING
TCP computer001:1810 computer001:0 LISTENING
TCP computer001:1904 computer001:0 LISTENING
TCP computer001:1962 computer001:0 LISTENING
TCP computer001:1971 computer001:0 LISTENING
TCP computer001:1978 computer001:0 LISTENING
TCP computer001:1988 computer001:0 LISTENING
TCP computer001:2054 computer001:0 LISTENING
TCP computer001:2086 computer001:0 LISTENING
TCP computer001:2142 computer001:0 LISTENING
TCP computer001:2258 computer001:0 LISTENING
TCP computer001:2267 computer001:0 LISTENING
TCP computer001:3372 computer001:0 LISTENING
TCP computer001:3539 computer001:0 LISTENING
TCP computer001:2269 computer001:microsoft-ds TIME_WAIT
TCP computer001:netbios-ssn computer001:0 LISTENING
TCP computer001:microsoft-ds danboy5.dorm5.nccu.edu.tw:3697 ESTABLISHED
TCP computer001:microsoft-ds vic.dorm5.nccu.edu.tw:4057 ESTABLISHED
TCP computer001:microsoft-ds takkijoe.dorm6.nccu.edu.tw:2532
ESTABLISHED
TCP computer001:microsoft-ds duncan.dorm6.nccu.edu.tw:3218 ESTABLISHED
TCP computer001:microsoft-ds Howard.dorm6.nccu.edu.tw:3268 ESTABLISHED
TCP computer001:microsoft-ds andy.dorm6.nccu.edu.tw:2332 ESTABLISHED
TCP computer001:microsoft-ds pkch.dorm6.nccu.edu.tw:3216 ESTABLISHED
TCP computer001:microsoft-ds meteor97.dorm6.nccu.edu.tw:3832
ESTABLISHED
TCP computer001:microsoft-ds Jeffrey.dorm6.nccu.edu.tw:3226 ESTABLISHED
TCP computer001:microsoft-ds brian8.dorm6.nccu.edu.tw:1288 ESTABLISHED
TCP computer001:microsoft-ds jiyoon.dorm8.nccu.edu.tw:4067 ESTABLISHED
TCP computer001:microsoft-ds louis.dorm7.nccu.edu.tw:1062 ESTABLISHED
TCP computer001:microsoft-ds JESUS-SJTXUS871:2128 ESTABLISHED
TCP computer001:1460 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1466 baym-cs395.msgr.hotmail.com:1863 ESTABLISHED
TCP computer001:1529 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1706 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1724 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1752 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1810 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1904 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1962 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1971 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1978 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1988 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:2054 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:2086 ptt.cc:telnet ESTABLISHED
TCP computer001:2142 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:2258 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:2267 nf1.nccu.edu.tw:http CLOSE_WAIT
UDP computer001:epmap *:*
UDP computer001:microsoft-ds *:*
UDP computer001:1029 *:*
UDP computer001:1473 *:*
UDP computer001:3456 *:*
UDP computer001:1467 *:*
UDP computer001:2089 *:*
UDP computer001:discard *:*
UDP computer001:netbios-ns *:*
UDP computer001:netbios-dgm *:*
UDP computer001:isakmp *:*
C:\Documents and Settings\Administrator>
------------------------------------------------------------------------------
我只有開PCMAN連PTT
MSN但是沒對話框
然後防毒軟體是MCAFEE
為什麼會有這麼多連線阿??
麻煩知道的人說一下吧
因為昨天才重灌
不希望馬上又要重灌
--
------------------------------------------------------------------------------
C:\Documents and Settings\Administrator>NETSTAT -A
Active Connections
Proto Local Address Foreign Address State
TCP computer001:smtp computer001:0 LISTENING
TCP computer001:http computer001:0 LISTENING
TCP computer001:epmap computer001:0 LISTENING
TCP computer001:https computer001:0 LISTENING
TCP computer001:microsoft-ds computer001:0 LISTENING
TCP computer001:1025 computer001:0 LISTENING
TCP computer001:1026 computer001:0 LISTENING
TCP computer001:1028 computer001:0 LISTENING
TCP computer001:1030 computer001:0 LISTENING
TCP computer001:1460 computer001:0 LISTENING
TCP computer001:1466 computer001:0 LISTENING
TCP computer001:1529 computer001:0 LISTENING
TCP computer001:1706 computer001:0 LISTENING
TCP computer001:1724 computer001:0 LISTENING
TCP computer001:1752 computer001:0 LISTENING
TCP computer001:1810 computer001:0 LISTENING
TCP computer001:1904 computer001:0 LISTENING
TCP computer001:1962 computer001:0 LISTENING
TCP computer001:1971 computer001:0 LISTENING
TCP computer001:1978 computer001:0 LISTENING
TCP computer001:1988 computer001:0 LISTENING
TCP computer001:2054 computer001:0 LISTENING
TCP computer001:2086 computer001:0 LISTENING
TCP computer001:2142 computer001:0 LISTENING
TCP computer001:2258 computer001:0 LISTENING
TCP computer001:2267 computer001:0 LISTENING
TCP computer001:3372 computer001:0 LISTENING
TCP computer001:3539 computer001:0 LISTENING
TCP computer001:2269 computer001:microsoft-ds TIME_WAIT
TCP computer001:netbios-ssn computer001:0 LISTENING
TCP computer001:microsoft-ds danboy5.dorm5.nccu.edu.tw:3697 ESTABLISHED
TCP computer001:microsoft-ds vic.dorm5.nccu.edu.tw:4057 ESTABLISHED
TCP computer001:microsoft-ds takkijoe.dorm6.nccu.edu.tw:2532
ESTABLISHED
TCP computer001:microsoft-ds duncan.dorm6.nccu.edu.tw:3218 ESTABLISHED
TCP computer001:microsoft-ds Howard.dorm6.nccu.edu.tw:3268 ESTABLISHED
TCP computer001:microsoft-ds andy.dorm6.nccu.edu.tw:2332 ESTABLISHED
TCP computer001:microsoft-ds pkch.dorm6.nccu.edu.tw:3216 ESTABLISHED
TCP computer001:microsoft-ds meteor97.dorm6.nccu.edu.tw:3832
ESTABLISHED
TCP computer001:microsoft-ds Jeffrey.dorm6.nccu.edu.tw:3226 ESTABLISHED
TCP computer001:microsoft-ds brian8.dorm6.nccu.edu.tw:1288 ESTABLISHED
TCP computer001:microsoft-ds jiyoon.dorm8.nccu.edu.tw:4067 ESTABLISHED
TCP computer001:microsoft-ds louis.dorm7.nccu.edu.tw:1062 ESTABLISHED
TCP computer001:microsoft-ds JESUS-SJTXUS871:2128 ESTABLISHED
TCP computer001:1460 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1466 baym-cs395.msgr.hotmail.com:1863 ESTABLISHED
TCP computer001:1529 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1706 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1724 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1752 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1810 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1904 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1962 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1971 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1978 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:1988 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:2054 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:2086 ptt.cc:telnet ESTABLISHED
TCP computer001:2142 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:2258 nf1.nccu.edu.tw:http CLOSE_WAIT
TCP computer001:2267 nf1.nccu.edu.tw:http CLOSE_WAIT
UDP computer001:epmap *:*
UDP computer001:microsoft-ds *:*
UDP computer001:1029 *:*
UDP computer001:1473 *:*
UDP computer001:3456 *:*
UDP computer001:1467 *:*
UDP computer001:2089 *:*
UDP computer001:discard *:*
UDP computer001:netbios-ns *:*
UDP computer001:netbios-dgm *:*
UDP computer001:isakmp *:*
C:\Documents and Settings\Administrator>
------------------------------------------------------------------------------
我只有開PCMAN連PTT
MSN但是沒對話框
然後防毒軟體是MCAFEE
為什麼會有這麼多連線阿??
麻煩知道的人說一下吧
因為昨天才重灌
不希望馬上又要重灌
--
Tags:
資安
All Comments
Related Posts
如何解 Trojan Horse?

By Barb Cronin
at 2004-10-08T13:13
at 2004-10-08T13:13
中了worm_gobot.s請問要如何解決

By Eden
at 2004-10-06T15:56
at 2004-10-06T15:56
請問

By Ida
at 2004-10-06T13:19
at 2004-10-06T13:19
請問這是什麼情形阿?

By Yedda
at 2004-10-05T18:51
at 2004-10-05T18:51
中了worm_gobot.s請問要如何解決

By Andrew
at 2004-10-04T13:54
at 2004-10-04T13:54