dave- Posted August 13, 2009 Posted August 13, 2009 Netstat -a shows a TCP connection to 75.125.111.2:http close_wait. I do not know what program created that connection. How do I find out. Should I be concerned? Quote
Forum² Admin F2 Staff Posted August 13, 2009 Forum² Admin Posted August 13, 2009 That means your webserver served up a webpage. Quote
dave- Posted August 13, 2009 Author Posted August 13, 2009 It happens on 2 of my machines on startup so I ruled that out that possibility. Also, one of my infected machines, the windows server machine has apache but the other, my XP machine at home, does not have a web server at all. The connection itself (75.125.111.2) does not appear to have an "A Record" but appears to be owned by an ISP called ThePlanet.com which provided dedicated and collocated servers Is there any command that can tell me what program created that 75.125.112 connection on startup? Quote
dave- Posted August 14, 2009 Author Posted August 14, 2009 PROBLEM SOLVED - it is Spyware Doctor that creates this connection Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.