I'm using Windows XP, without antivirus software. I'm connected to the internet via router. Everytime when I start PC, immediately after, I see that my PC connects with over 20 IPs from diffrent countries,(IPs are externally, not localy LAN) almost connections using same port! I'm not opening any programs myself. I wonder how can I see what programs or threads are trying to open connection, and what port are using, and more useful information.. I already found a software to analyze connections, but it gives me only IP Source, IP Destination, Time, Lenght .. But I need almost to see which program opened this connections, which ports are using.
-
Get yourself a software firewall, something like zone alarm. It will provide information on what programs are making outbound connections and will block them unless you explicitly allow it.– MaQleodOct 15, 2011 at 18:08
Add a comment
|
3 Answers
To expand on Miro co's answer.
netstat -anb
Will provide a list of connections to and from your PC, with remote IP and port information. The last column will content the PID (processors ID) of the application that made or received the connection.
If you open Task Manager (right click on the task bar) and select View/Select Columns... you can enable the PID column. Now all you need to do is look for the PID for the relevant connections in netstat in Task Manager to identify what application is opening the ports.
You can run the command:
netstat -n
or
netstat -b
TCPView
You can use TCPView to view the programs that are connecting to the internet, the protocol, local address and port, remote address and port.
Wireshark
if you need something more advanced you can try wireshark, it will show you the traffic (Local and remote port, address, protocol, data transmitted,etc...)
If you need to prevent certain programs from connecting to the internet, you have to install a firewall such as Comodo firewall
