Re: Need help with netstat and connections running in background

If someone could tell me how to copy the netstat -a info fromt he cmd
screen that would be nice.

Right click on the cmd Title bar, point to Edit and click on Select All.
Then right click on the selected text. It should now be in your Clipboard.
Paste it wherever.

Alt + Spacebar + E + S will Select all the contents of a command window.

Alt + Spacebar opens context menu
E opens the Edit menu
S is Select All

See more below.
---------

netstat.exe displays protocol statistics and current TCP/IP network
connections.

process identifier (PID)
[[A numerical identifier that uniquely distinguishes a process while it
runs. Use Task Manager to view PIDs.]]

Open a command prompt...
Start | Run | Type: cmd | Click OK |
Type: netstat -ano and hit ENTER

Under Local Address, look for the numbers after the colon (:), that's the
port number.

If you see 1128 listed, look at the corresponding number in the PID column.
You can match up the PID # in Task Manager to find the process that is using
the port.

Open the Task Manager, Ctrl + Shift + Esc.
Click on the Processes tab.
Click the PID column header to sort the PID #s in order.

Example....
-------------
C:\>netstat -ano

Active Connections

Proto Local Address Foreign Address State PID
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4
TCP 0.0.0.0:2963 0.0.0.0:0 LISTENING 1636
TCP 24.9.206.13:2963 207.46.248.16:119 ESTABLISHED 1636
TCP 24.9.206.13:2971 216.148.227.80:110 TIME_WAIT 0
TCP 24.9.206.13:2972 65.17.220.40:110 TIME_WAIT 0
UDP 0.0.0.0:445 *:* 4
UDP 127.0.0.1:2760 *:* 1636
-------------

In the example above PID 1636 is msimn.exe (Outlook Express).

PID numbers change every time that you reboot and are different on every
machine.

You can type in a command prompt: netstat /? for help.

UPDATE your antivirus software and run a full system scan.

UPDATE whatever anti-spyware applications that you have and run a full
system scan with each one.

You might want to start in Safe Mode to run your antivirus and anti-spyware
software.

Running a full system antivirus scan or anti-spyware scan in Safe Mode can
be a good idea. Some viruses and other malware like to conceal themselves
in areas Windows protects while using them. Safe mode will prevent those
applications access and therefore unprotect the viruses or other malware
allowing for easier removal.

How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo

Alt + Spacebar + E + P will paste contents of clipboard into a command
window.

Alt + Spacebar opens context menu
E opens the Edit menu
P is Paste

Alt + Spacebar + E + S will Select all the contents of a command window.

Alt + Spacebar opens context menu
E opens the Edit menu
S is Select All

Command Prompt Copy & Paste

This will set the QuickEdit Mode and the Insert Mode.

Right click the cmd.exe shortcut | Properties | Options tab |
Under Edit Options select both:
QuickEdit mode
and
Insert mode
Click Apply | Click OK

QuickEdit mode
[[Enables you to use a pointing device (mouse) to cut and paste, bypassing
the Edit menu.]]

This option provides a fast, easy way to copy text from (and paste text
into) Command Prompt windows with a mouse. You can highlight text with a
mouse and use the Enter key to copy the highlighted text to the Windows
Clipboard. Or highlight text and right click to copy to clipboard.

Insert mode
[[Enables you to insert text at the cursor. If this is not selected, text
that is typed at the cursor replaces existing text.]]

This option (on by default) allows you to insert text at the cursor
position. You can right click and paste.

Or...
Open a command Prompt | Right click the top border |
Properties | Options tab | Under Edit Options select both:
QuickEdit mode
and
Insert mode
Click Apply | Click OK | Place a tick in Modify shortcut that started this
window |
Click OK.
-----

Highlight text with the cursor and hit the Enter key to copy to the Windows
clipboard. Or highlight text and right click to copy to the Windows
clipboard.

[[By selecting the Quick Edit Mode check box, you enable copy and paste from
the Command Prompt window. To copy, select the text in the Command Prompt
window with your left mouse button, and then right-click. To paste, either
at the command prompt or in a text file, right-click.]]

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:2D4C20EE-83F0-45D1-A5BF-ADFC65DA5FD9@xxxxxxxxxxxxx,
InTheZoneAC <InTheZoneAC@xxxxxxxxxxxxxxxxxxxxxxxxx> hunted and pecked:
I have a dell xps 400 with spybot, ad-aware, yahoo antispy and charter
security sweet. As of right now nothing harmful is on my pc. I also use a
full copy of registry mechanic to help clean my pc.

Internet: 3.0mbps charter cable.

These last two weeks I've been having problems where my d/l speed is
around 300-700kbps and my upload speed never slows down, usually around
250kbps.

Well I've called charter, had a tech guy come down to check my stuff, did
a live chat with charter, replaced the modem, etc. and all say there's
something else that's wrong that they don't know. I'm basically trying
everything out there(direct line, no router, connect modem to a different
pc, replace cables, etc.)

The last person I talked with said it could be that there's a virus(es) on
my pc or other pc's in the house on the network.

He asked me to run netstat -a and read off the number of tcp/udp
connections. I probably had 30 connections total. He said I should have no
more than 7 tcp and 7 udp.

I did the ctrl+alt+del and viewed running applications, nothing out the
ordinary was on there.

Here's my current netstat -a list. If you can tell me or pinpoint
something wrong with it and how to fix it I would gladly appreciate any
help. Charter has been nothing but problems and they're the only ISP I've
had to have disconnects, latency issues, etc so many times each month.

______________________

If someone could tell me how to copy the netstat -a info fromt he cmd
screen that would be nice.

For the UDP foreign addresses it shows *:*
For tcp it shows Time Wait and Listening

.