Monitoring programs internet connection

Question

I'm using Windows XP, without antivirus software. I'm connected to the internet via router. Everytime when I start PC, immediately after, I see that my PC connects with over 20 IPs from diffrent countries,(IPs are externally, not localy LAN) almost connections using same port! I'm not opening any programs myself. I wonder how can I see what programs or threads are trying to open connection, and what port are using, and more useful information.. I already found a software to analyze connections, but it gives me only IP Source, IP Destination, Time, Lenght .. But I need almost to see which program opened this connections, which ports are using.

Answer 1

To expand on Miro co's answer.

netstat -anb

Will provide a list of connections to and from your PC, with remote IP and port information. The last column will content the PID (processors ID) of the application that made or received the connection.

If you open Task Manager (right click on the task bar) and select View/Select Columns... you can enable the PID column. Now all you need to do is look for the PID for the relevant connections in netstat in Task Manager to identify what application is opening the ports.

Answer 2

You can run the command:

netstat -n

or

netstat -b

Answer 3

TCPView

You can use TCPView to view the programs that are connecting to the internet, the protocol, local address and port, remote address and port.

Wireshark

if you need something more advanced you can try wireshark, it will show you the traffic (Local and remote port, address, protocol, data transmitted,etc...)

If you need to prevent certain programs from connecting to the internet, you have to install a firewall such as Comodo firewall