Hacked Computer

[bigdaddykane]

Does anyone no how to look at a Netstat to see if it looks normal,Thank you.

 

[vampist]

I'm sure most of us could make some sense of it. Mind posting it? What makes you think the computer is "hacked"?

 

[wmorri]

Netstat is a program that allows a user to see what traffic is incoming and outgoing from their computer. I could look at it if you have some info to post up.

I also would like to know what makes you think your computer is being "hacked"?

 

[bigdaddykane]

Here you go and thank you for your time.No i was just on another forum reading about someone who thinks they might have been hacked so it got me thinking .


Microsoft Windows [Version 6.1.7100]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Users\valiant>netstat -an

Active Connections

Proto Local Address Foreign Address State
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:554 0.0.0.0:0 LISTENING
TCP 0.0.0.0:2869 0.0.0.0:0 LISTENING
TCP 0.0.0.0:5357 0.0.0.0:0 LISTENING
TCP 0.0.0.0:10243 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49152 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49153 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49154 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49155 0.0.0.0:0 LISTENING
TCP 0.0.0.0:49157 0.0.0.0:0 LISTENING
TCP 127.0.0.1:51683 127.0.0.1:51684 ESTABLISHED
TCP 127.0.0.1:51684 127.0.0.1:51683 ESTABLISHED
TCP 127.0.0.1:51685 127.0.0.1:51686 ESTABLISHED
TCP 127.0.0.1:51686 127.0.0.1:51685 ESTABLISHED
TCP 192.168.2.3:139 0.0.0.0:0 LISTENING
TCP 192.168.2.3:49189 72.246.99.42:80 CLOSE_WAIT
TCP 192.168.2.3:52173 209.62.185.19:80 ESTABLISHED
TCP 192.168.2.3:52217 205.177.95.214:80 ESTABLISHED
TCP 192.168.2.3:52290 72.246.99.65:80 TIME_WAIT
TCP 192.168.2.3:52314 72.246.99.115:80 TIME_WAIT
TCP 192.168.2.3:52316 72.246.99.114:80 TIME_WAIT
TCP 192.168.2.3:52416 208.68.59.10:80 ESTABLISHED
TCP 192.168.2.3:52422 72.246.99.90:80 ESTABLISHED
TCP 192.168.2.3:52423 72.246.99.59:80 ESTABLISHED
TCP [::]:135 [::]:0 LISTENING
TCP [::]:445 [::]:0 LISTENING
TCP [::]:554 [::]:0 LISTENING
TCP [::]:2869 [::]:0 LISTENING
TCP [::]:3587 [::]:0 LISTENING
TCP [::]:5357 [::]:0 LISTENING
TCP [::]:10243 [::]:0 LISTENING
TCP [::]:49152 [::]:0 LISTENING
TCP [::]:49153 [::]:0 LISTENING
TCP [::]:49154 [::]:0 LISTENING
TCP [::]:49155 [::]:0 LISTENING
TCP [::]:49157 [::]:0 LISTENING
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:5004 *:*
UDP 0.0.0.0:5005 *:*
UDP 0.0.0.0:5355 *:*
UDP 0.0.0.0:55566 *:*
UDP 0.0.0.0:55570 *:*
UDP 0.0.0.0:59768 *:*
UDP 0.0.0.0:65521 *:*
UDP 127.0.0.1:1900 *:*
UDP 127.0.0.1:55568 *:*
UDP 127.0.0.1:55569 *:*
UDP 127.0.0.1:55571 *:*
UDP 127.0.0.1:55737 *:*
UDP 127.0.0.1:59216 *:*
UDP 127.0.0.1:60679 *:*
UDP 192.168.2.3:137 *:*
UDP 192.168.2.3:138 *:*
UDP 192.168.2.3:1900 *:*
UDP 192.168.2.3:59215 *:*
UDP 192.168.2.3:60679 *:*
UDP [::]:3540 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:5004 *:*
UDP [::]:5005 *:*
UDP [::]:5355 *:*
UDP [::]:55567 *:*
UDP [::]:59769 *:*
UDP [::]:65522 *:*
UDP [::1]:1900 *:*
UDP [::1]:59214 *:*
UDP [fe80::e1b1:9012:c604:1f46%11]:1900 *:*
UDP [fe80::e1b1:9012:c604:1f46%11]:59213 *:*

C:\Users\valiant>

 

[vampist]

So far I only see things connected to either your computer (127.0.0.1) or your lan network(192.168.*.*). I do see a few connections from your computer to another but they are all on port 80 which is Http. But I'm not sure that could qualify as being "hacked". What is happening to your computer? Anything?

 

[yeahman]

run netstat -nab to see what programs have those sockets open.

 

[Raiduhs]

So far I only see things connected to either your computer (127.0.0.1) or your lan network(192.168.*.*). I do see a few connections from your computer to another but they are all on port 80 which is Http. But I'm not sure that could qualify as being "hacked". What is happening to your computer? Anything?

What does this connection mean?
TCP 127.0.0.1:51683 127.0.0.1:51684 ESTABLISHED

If 127.0.1 is your localhost why would you connect to yourself on different ports? Or is it possible to connect to another computer in your lan via 127.0.0.1.


I apologize for the newb question just confused.