Wednesday, October 3, 2007

Unlock This! I see you...view your connections

What current Internet connections and listening ports has open and operating in your computer? What if a program was installed to sneak up on you and sends information remotely like a Trojan Virus.

You can see what ports are open and which programs are using these ports. In this blog, I will give two ways on how to view your Internet connections and listening ports that are currently open.

NETSTAT

Netstat according to Microsoft, It displays protocol statistics and current TCP/IP network connections.

How to use Netstat to view your connections:

Open the command prompt, type: netstat -ao
netstat 
In the 2nd Column, you will see my  ip-address connected to a remote host 'sip46' and 'cs1' using Process Identitifer (PID) 3820.
Next, open the Task manager (Ctrl-Shift-Esc). Add the PID column by clicking
netstat2



View Menu--> Select Column

Now you can find the application using the PID 3820


Gotcha! It is a port used by yahoo messenger.
netstat4  
TCPVIEW

The more convenient way is by using TCPVIEW program. To download, click here. It is a graphical representation of netstat, a free utility by Sysinternals (has been acquired by Microsoft) which not only lists the IP addresses communicating with your computer, it tells you what program is using that connection. So you can use this in finding a trojan virus.

tcpviewYM

No comments:

Post a Comment