dave- Posted August 13, 2009 Posted August 13, 2009 Netstat -a shows a TCP connection to 75.125.111.2:http close_wait. I do not know what program created that connection. How do I find out. Should I be concerned? Quote
FPCH Admin AWS Posted August 13, 2009 FPCH Admin Posted August 13, 2009 That means your webserver served up a webpage. Quote Off Topic Forum - Unlike the Rest
dave- Posted August 13, 2009 Author Posted August 13, 2009 It happens on 2 of my machines on startup so I ruled that out that possibility. Also, one of my infected machines, the windows server machine has apache but the other, my XP machine at home, does not have a web server at all. The connection itself (75.125.111.2) does not appear to have an "A Record" but appears to be owned by an ISP called ThePlanet.com which provided dedicated and collocated servers Is there any command that can tell me what program created that 75.125.112 connection on startup? Quote
dave- Posted August 14, 2009 Author Posted August 14, 2009 PROBLEM SOLVED - it is Spyware Doctor that creates this connection Quote
Recommended Posts