Trojan in it? The experience of killing Trojans have not tried?
The general common Trojan horse, antivirus software, most of them could identify it, but but if they are relatively new or very likely to miss rare, the average Trojan on the computer run-time will be occupied by a single port or open waiting for others to control, our usual practice is to analyze the port to see if there is an exception process, Windows can only be provided by the netstat command lists the ports opened, but if it depends on which program occupied the port, and sometimes resorted to a third party software, such as ActivePort or Fport so on, but the software needs to be installed in order to use, trouble. . . Anyway, I was most afraid of installed software, if not a last resort, under normal circumstances in addition to their popular software installation is not likely to go to those who use one or two will not re-use to the software! Sometimes, some unknown software installed, they might have problems! Still using the system comes with better! ! !
Introduction Reformed turn, in fact, Windows 2003 or Windows XP, we can use the netstat command, add parameters: netstat-anb, returned the following results:
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.
C: \ Documents and Settings \ Administrator> netstat-anb
Active Connections
Proto Local Address Foreign Address State PID
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING 1064
[QQMusic.exe]
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 952
c: \ windows \ system32 \ WS2_32.dll
C: \ WINDOWS \ system32 \ RPCRT4.dll
c: \ windows \ system32 \ rpcss.dll
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ system32 \ ADVAPI32.dll
[svchost.exe]
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4
[System]
TCP 127.0.0.1:1028 0.0.0.0:0 LISTENING 1500
[alg.exe]
TCP 222.93.176.43:1660 219.129.239.178:80 ESTABLISHED 1368
[iexplore.exe]
TCP 222.93.176.43:1661 219.129.239.178:80 ESTABLISHED 1368
[iexplore.exe]
TCP 222.93.176.43:1662 219.129.239.178:80 ESTABLISHED 1368
[iexplore.exe]
TCP 222.93.176.43:1663 219.129.239.178:80 ESTABLISHED 1368
[iexplore.exe]
TCP 222.93.176.43:1664 219.129.239.178:80 ESTABLISHED 1368
[iexplore.exe]
TCP 222.93.176.43:1665 219.129.239.178:80 ESTABLISHED 1368
[iexplore.exe]
TCP 222.93.176.43:1666 219.129.239.178:80 ESTABLISHED 1368
[iexplore.exe]
TCP 222.93.176.43:1667 219.129.239.178:80 ESTABLISHED 1368
[iexplore.exe]
TCP 222.93.176.43:1668 219.129.239.178:80 ESTABLISHED 1368
[iexplore.exe]
TCP 222.93.176.43:1595 121.14.74.26:80 TIME_WAIT 0
TCP 222.93.176.43:1608 202.102.60.45:80 TIME_WAIT 0
TCP 222.93.176.43:1624 61.180.35.63:80 TIME_WAIT 0
TCP 222.93.176.43:1630 61.164.115.125:80 TIME_WAIT 0
TCP 222.93.176.43:1639 61.164.115.125:80 TIME_WAIT 0
TCP 222.93.176.43:1640 220.165.12.185:80 TIME_WAIT 0
TCP 222.93.176.43:1656 121.14.74.26:80 TIME_WAIT 0
UDP 0.0.0.0:500 *: * 728
[lsass.exe]
UDP 0.0.0.0:13104 *: * 1064
[QQMusic.exe]
UDP 0.0.0.0:445 *: * 4
[System]
UDP 0.0.0.0:4000 *: * 3792
[QQ.exe]
UDP 0.0.0.0:4500 *: * 728
[lsass.exe]
UDP 0.0.0.0:9000 *: * 3792
[QQ.exe]
UDP 0.0.0.0:6000 *: * 3792
[QQ.exe]
UDP 127.0.0.1:1136 *: * 3792
[QQ.exe]
UDP 127.0.0.1:1256 *: * 1712
[iexplore.exe]
UDP 127.0.0.1:1900 *: * 1080
c: \ windows \ system32 \ WS2_32.dll
c: \ windows \ system32 \ ssdpsrv.dll
ntdll.dll
C: \ WINDOWS \ system32 \ kernel32.dll
[svchost.exe]
UDP 127.0.0.1:1249 *: * 1368
[iexplore.exe]
UDP 127.0.0.1:123 *: * 992
c: \ windows \ system32 \ WS2_32.dll
c: \ windows \ system32 \ w32time.dll
ntdll.dll
C: \ WINDOWS \ system32 \ kernel32.dll
[svchost.exe]
UDP 127.0.0.1:1594 *: * 1064
[QQMusic.exe]
UDP 222.93.176.43:13094 *: * 1064
[QQMusic.exe]
UDP 222.93.176.43:1900 *: * 1080
c: \ windows \ system32 \ WS2_32.dll
c: \ windows \ system32 \ ssdpsrv.dll
ntdll.dll
C: \ WINDOWS \ system32 \ kernel32.dll
[svchost.exe]
UDP 222.93.176.43:123 *: * 992
c: \ windows \ system32 \ WS2_32.dll
c: \ windows \ system32 \ w32time.dll
ntdll.dll
C: \ WINDOWS \ system32 \ kernel32.dll
[svchost.exe]
C: \ Documents and Settings \ Administrator>