View original (French)

Netstat result (in cmd)

Anonymous user -  
 Anonymous user -
Hello, good evening. I’m posting here because I think my PC is infected by a stealer. I ran a netstat

Proto Local Address Foreign Address State
TCP 192.168.1.16:49158 65.55.223.34:40015 TIME_WAIT
TCP 192.168.1.16:49161 91.190.216.59:12350 TIME_WAIT
TCP 192.168.1.16:49180 db3msgr5011011:https TIME_WAIT
TCP 192.168.1.16:49223 212.118.234.81:12975 ESTABLISHED
TCP 192.168.1.16:55803 31-170-161-116:http TIME_WAIT
TCP 192.168.1.16:55805 31-170-161-116:http TIME_WAIT
TCP 192.168.1.16:55806 31-170-160-65:http TIME_WAIT
TCP 192.168.1.16:55807 31-170-160-65:http TIME_WAIT
TCP 192.168.1.16:55808 host-92-20-85-106:32221 TIME_WAIT
If you can tell me what this means that would be nice

Configuration: Windows 7 / Firefox 15.0.1

2 answers

  2. Anonymous user
     
    there are even more now I specify without downloading anything
    Local Address Remote Address State
    TCP 127.0.0.1:49503 bibillromain-PC:49502 TIME_WAIT
    TCP 192.168.1.16:49158 157.55.235.153:40041 ESTABLISHED
    TCP 192.168.1.16:49159 78.141.179.17:12350 ESTABLISHED
    TCP 192.168.1.16:49162 db3msgr6011511:https ESTABLISHED
    TCP 192.168.1.16:49189 163-204:https CLOSE_WAIT
    TCP 192.168.1.16:49224 212.118.234.79:12975 ESTABLISHED
    TCP 192.168.1.16:49565 ec2-174-129-240-215:5222 ESTABLISHED
    TCP 192.168.1.16:50552 81.52.140.25:http TIME_WAIT
    TCP 192.168.1.16:50563 90.84.60.120:http TIME_WAIT
    TCP 192.168.1.16:50801 wg-in-f82:http TIME_WAIT
    TCP 192.168.1.16:50802 90.84.60.24:http TIME_WAIT
    TCP 192.168.1.16:50803 213.174.153.61:http TIME_WAIT
    TCP 192.168.1.16:50807 apache2-zoo:http TIME_WAIT
    TCP 192.168.1.16:50808 apache2-zoo:http TIME_WAIT
    TCP 192.168.1.16:50811 mycashcloner:http TIME_WAIT
    TCP 192.168.1.16:50814 wg-in-f82:http TIME_WAIT
    TCP 192.168.1.16:50823 90.84.60.24:http TIME_WAIT
    TCP 192.168.1.16:50825 50:http TIME_WAIT
    TCP 192.168.1.16:50827 mycashcloner:http TIME_WAIT
    TCP 192.168.1.16:50828 mycashcloner:http TIME_WAIT
    TCP 192.168.1.16:50829 mycashcloner:http TIME_WAIT
    TCP 192.168.1.16:50831 ec2-184-73-228-94:http ESTABLISHED
    0
    1. H0enheim Posted messages 1458 Registration date   Status Member Last intervention   467
       
      Hi,
      first of all, does mycashcloner, apache2-zoo, ring a bell?
      it could be that you have an Apache server or that you downloaded programs that establish a connection from other servers

      Otherwise the
      213.174.153.61 < located in Virginia, USA
      these here / 90.84.60.24 /// 90.84.60.120 in France ( Akamai Technologies )
      157.55.235.153 and others < microsoft corp
      184-73-228-94 ( Amazon.com )

      Are you playing on a network?

      ps: if you have connected to sites
      it's normal that it shows you the IPs
      0
    2. Anonymous user
       
      Good evening, I haven’t tested mycashcloner and apache2-zoo, and yes I’m playing on a network, why do you ask?
      0
    3. Anonymous user
       
      then at PC startup after just being on google and CCM I have this:
      Local Address Remote Address State
      TCP 127.0.0.1:5357 bibillromain-PC:49166 TIME_WAIT
      TCP 127.0.0.1:5357 bibillromain-PC:49181 TIME_WAIT
      TCP 127.0.0.1:5357 bibillromain-PC:49185 TIME_WAIT
      TCP 127.0.0.1:49193 bibillromain-PC:49194 ESTABLISHED
      TCP 127.0.0.1:49194 bibillromain-PC:49193 ESTABLISHED
      TCP 192.168.1.16:2869 livebox:1113 TIME_WAIT
      TCP 192.168.1.16:2869 livebox:3198 TIME_WAIT
      TCP 192.168.1.16:5357 romain-PC:50216 TIME_WAIT
      TCP 192.168.1.16:5357 romain-PC:50265 TIME_WAIT
      TCP 192.168.1.16:49167 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49168 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49169 212.118.234.81:12975 ESTABLISHED
      TCP 192.168.1.16:49170 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49171 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49172 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49174 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49175 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49176 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49177 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49178 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49179 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49180 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49184 90.84.50.154:http TIME_WAIT
      TCP 192.168.1.16:49187 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49188 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49189 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49190 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49191 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49192 livebox:2555 TIME_WAIT
      TCP 192.168.1.16:49195 wg-in-f94:https ESTABLISHED
      TCP 192.168.1.16:49196 wg-in-f105:https ESTABLISHED
      TCP 192.168.1.16:49197 TGV:http ESTABLISHED
      TCP 192.168.1.16:49198 par08s10-in-f15:https ESTABLISHED
      TCP 192.168.1.16:49199 wg-in-f94:http ESTABLISHED
      TCP 192.168.1.16:49200 81.52.160.40:http ESTABLISHED
      TCP 192.168.1.16:49201 81.52.160.40:http ESTABLISHED
      TCP 192.168.1.16:49202 90.84.50.201:http ESTABLISHED
      TCP 192.168.1.16:49203 90.84.50.201:http ESTABLISHED
      TCP 192.168.1.16:49204 90.84.50.201:http ESTABLISHED
      TCP 192.168.1.16:49205 90.84.50.201:http ESTABLISHED
      TCP 192.168.1.16:49206 90.84.50.201:http ESTABLISHED
      TCP 192.168.1.16:49207 90.84.50.201:http ESTABLISHED
      TCP 192.168.1.16:49208 195.54.49.9:http TIME_WAIT
      TCP 192.168.1.16:49209 195.54.49.9:http TIME_WAIT
      TCP 192.168.1.16:49210 wg-in-f95:http ESTABLISHED
      TCP 192.168.1.16:49211 wg-in-f95:http TIME_WAIT
      TCP 192.168.1.16:49213 93.184.221.133:http TIME_WAIT
      TCP 192.168.1.16:49215 195.248.250.50:http TIME_WAIT
      TCP 192.168.1.16:49217 195.248.250.50:http TIME_WAIT
      TCP 192.168.1.16:49219 195.248.250.50:http TIME_WAIT
      TCP 192.168.1.16:49220 www-01-02-cdg1:http ESTABLISHED
      TCP 192.168.1.16:49221 www-01-02-cdg1:http TIME_WAIT
      TCP 192.168.1.16:49222 81.52.160.35:http ESTABLISHED
      TCP 192.168.1.16:49223 81.52.160.35:http ESTABLISHED
      TCP 192.168.1.16:49224 81.52.160.35:http ESTABLISHED
      TCP 192.168.1.16:49225 81.52.160.35:http ESTABLISHED
      TCP 192.168.1.16:49226 81.52.160.35:http ESTABLISHED
      TCP 192.168.1.16:49227 81.52.160.35:http ESTABLISHED
      TCP 192.168.1.16:49228 195.248.250.50:http TIME_WAIT
      TCP 192.168.1.16:49229 a23-38-15-139:http ESTABLISHED
      TCP 192.168.1.16:49230 a23-38-15-139:http TIME_WAIT
      TCP 192.168.1.16:49235 90.84.59.26:http ESTABLISHED
      TCP 192.168.1.16:49236 90.84.59.26:http ESTABLISHED
      TCP 192.168.1.16:49237 90.84.59.26:http ESTABLISHED
      0
    4. H0enheim Posted messages 1458 Registration date   Status Member Last intervention   467
       
      Don’t worry,

      And this in a definitive way

      Goodbye.
      0
    5. Anonymous user
       
      Okay, I’m going to use Wireshark because I’m having big problems, even just doing a Google search!
      0