Uncertain as to what I am looking at, malware prehaps

By Alley Cat
in Smart Home, Network & Security

 Share

Recommended Posts

Rising Star

Alley Cat

Posted
Posted

I just rebooted, slow to connect to internet but I had no malware infections.

Microsoft Windows XP [Version 5.1.2600]

© Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Wolf>netstat -a -b

Active Connections

Proto Local Address

Foreign Address: sex-girl.ru:0

LISTENING

port 1720

c:\windows\system32\WS2_32.dll

C:\WINDOWS\system32\RPCRT4.dll

c:\windows\system32\rpcss.dll

C:\WINDOWS\system32\svchost.exe

-- unknown component(s) --

[svchost.exe]

TCP

ehwolf:microsoft-ds

sex-girl.ru:0

LISTENING

port 4

[system]

TCP ehwolf:1025

sex-girl.ru:0

LISTENING

port 464

[LEXPPS.EXE]

TCP ehwolf:1095

sex-girl.ru:0

LISTENING

port 3596

[alg.exe]

TCP ehwolf:2559

sex-girl.ru:0

LISTENING

port 204

[daemonu.exe]

TCP ehwolf:5152

sex-girl.ru:0

LISTENING

port 992

[jqs.exe]

TCP ehwolf:5354

sex-girl.ru:0

LISTENING

port 1876

[mDNSResponder.exe]

TCP ehwolf:31416

sex-girl.ru:0

LISTENING

port 1824

[boinc.exe]

TCP ehwolf:netbios-ssn

sex-girl.ru:0

LISTENING

port 4

[system]

C:\Documents and Settings\Wolf>

Grand Master

+BudMan MVC

Posted
  • MVC
Posted

Normally a listening foreign address would be 0.0.0.0, which means all of them -- not sure why yours is resolving it to sex-girl.ru -- is that the name of your machine?? Or it could be the actual address? But state would not be listening if you had a connection. Would say something like established or close_wait or if trying to make the connection syn_sent, etc. Listening just means that - listening on that port for a connection from normally ALL addresses 0.0.0.0.

example

C:\Windows\system32>netstat -a -b -n

Active Connections

  Proto  Local Address		  Foreign Address		State
  TCP	0.0.0.0:80			 0.0.0.0:0			  LISTENING


C:\Windows\system32>netstat -a -b

Active Connections

  Proto  Local Address		  Foreign Address		State
  TCP	0.0.0.0:80			 i5-w7:0				LISTENING

See with the -n it does not resolve the addresses, I would assume ewolf is something in your host file for the name of your box? Post again with -n and in code tags so get some format to the layout.

This topic is now closed to further replies.
 Share
Go to topic listing

  • Posts

    • Save up to 87% on ChatPlayground AI lifetime subscriptions

      By News Staff · Posted

      Save up to 87% on ChatPlayground AI lifetime subscriptions by Steven Parker Today's highlighted deal comes via our Apps + Software section of the Neowin Deals store, where for only a limited time, you can save up to 87% on ChatPlayground AI: lifetime subscriptions. ChatPlayground AI puts the world’s top AI models in one powerful interface, letting you enter a single prompt and instantly compare outputs from multiple models to choose the perfect response for your needs. Boost productivity and creativity with access to the latest AI giants like GPT-4o, Claude Sonnet 4, Gemini 1.5 Flash, DeepSeek V3, and dozens more — all in one window. Whether you’re chatting, coding, generating images, or refining prompts, ChatPlayground AI equips you with advanced tools like prompt engineering, image/PDF chat, saved conversations, and AI image creation, plus priority support to keep your workflow seamless. Access the world’s best AI models Side-by-Side Comparisons: Enter one prompt & instantly view results from multiple AI models to find the best output for your needs 40+ AI Models: Includes GPT-4o, Claude Sonnet 4, Gemini 1.5 Flash, DeepSeek V3, Llama, Perplexity, and many more Multi-Function Platform: Access AI for chat, image generation & coding all within a single interface Web Browser Extension: Offers a Chrome extension to seamlessly integrate the platform into your browsing workflow Boost productivity with powerful features ChatPlayground Interface: Designed for seamless AI model comparison in one window Prompt Engineering: Refine & optimize your prompts for better, more accurate responses Chat with Images & PDFs: Upload visuals and documents to get context-aware answers Saved Chat History: Keep track of past conversations for reference & ongoing projects AI Image Generation: Create high-quality visuals powered by top AI image models Priority Customer Support: Get faster assistance whenever you need it What you'll get with the Unlimited Plan Includes unlimited messages/month Built for prompt engineers, startups, and teams who run experiments nonstop Includes priority access to new features and future models Good to know Length of access: lifetime Redemption deadline: redeem your code within 30 days of purchase Access options: Desktop Max number of device(s): Unlimited Available to both NEW & Existing users Updates included A lifetime subscription to ChatPlayground AI (Unlimited Plan) normally costs $619, but you can pick it up for just $79 for a limited time - that represents a saving of $530 (87% off). Click the link below for more details, always check terms and specifications before making a purchase. Get this ChatPlayground AI (Unlimited) for $79 (was $619) There are also two other discounted plans to choose from. Although priced in U.S. dollars, this deal is available for digital purchase worldwide. Support queries If you have queries or need support for any of the Neowin Deals, please use the contact form here. Neowin Deals are managed and sold by StackCommerce who represent Neowin on an affiliate basis. Why we post these deals We post these because we earn commission on each sale so as not to rely solely on advertising, which many of our readers block. It all helps toward paying staff reporters, servers and hosting costs. So for those that keep moaning and complaining, be thankful we're still online for you to even do that. Other ways to support Neowin Whitelist Neowin by not blocking our ads Create a free member account to see fewer ads Make a donation to support our day to day running costs Subscribe to Neowin - for $14 a year, or $28 a year for an ad-free experience Disclosure: Neowin benefits from revenue of each sale made through our branded deals site powered by StackCommerce.
    • Sihoo Doro C300 Pro V2 Ergonomic Office Chair review: The Ikea of chairs

      By Steven P. · Posted

      Not on my Aeron Remastered no.
    • Tidal won't monetize AI slop music, company says

      By Steven P. · Posted

      I like Tidal, but it still does not control devices from the mobile/app and still no surround support. And yeah re: above comment I still get a lot of network errors and I am on a 4/4 Gbit Fiber connection.
    • Microsoft Edge gets tons of security features, including AI model that can see your screen

      By Riggers · Posted

      Aren`t "security features" and "AI model that can see your screen" a tad diametric!
    • Samsung, Amazon extend 990 PRO 2TB NVMe SSD deal beyond Prime Day 2026

      By hellowalkman · Posted

      Samsung, Amazon extend 990 PRO 2TB NVMe SSD deal beyond Prime Day 2026 by Sayan Sen Recently, we had Amazon's Prime Day 2026 sales wherein there were several great deals including on SSDs. One of those discounted components was the Samsung 990 PRO SSD as the 2TB variant of it was selling for $370, a very good price after a long time. Although that deal was supposed to expire today, Amazon has now extended that sale further (purchase link under the specs table down below). The 990 PRO is a PCIe Gen4 NVMe SSD and still one of the fastest drives available today for under $400. Speaking of fast, sequential reads and writes are rated at 7450 MB/s and 6900 MB/s, respectively. The random throughputs for reads and writes are 1400K IOPS and 1550K IOPS, respectively. The 990 PRO is based on Samsung's 7th Gen V-NAND flash, and it too is TLC. It packs 2 gigs of LPDDR4 DRAM cache, which helps the random performance. The endurance rating for this is 1200 TBW (terabytes written), which should be sufficient for most users. The Samsung 990 PRO is compatible with the PlayStation 5, but if you are going to use the 990 PRO on a PC, check out the Samsung Magician app that lets you track your drive's health, update its firmware, customize various settings, and more. The technical specs of the Samsung 990 PRO 2TB are given in the table below: Specification Value Form Factor M.2 2280 Interface PCIe Gen 4.0 x4, NVMe 2.0 NAND Flash Samsung V-NAND TLC Controller Samsung In-house Controller Cache Memory Samsung 2GB Low Power DDR4 SDRAM Sequential Read Speed Up to 7,450 MB/s Sequential Write Speed Up to 6,900 MB/s Random Read (4KB, QD32) Up to 1,400,000 IOPS Random Write (4KB, QD32) Up to 1,550,000 IOPS Random Read (4KB, QD1) Up to 22,000 IOPS Random Write (4KB, QD1) Up to 80,000 IOPS Operating Temperature 0°C to 70°C Reliability (MTBF) 1.5 Million Hours Endurance 1,200 TBW (Total Bytes Written) Get it at the link below: Samsung 990 PRO SSD 2TB NVMe SSD (MZ-V9P2T0B/AM): $369.99 (Sold and Shipped by Amazon US) Good to know This Amazon deal is U.S. specific, and not available in other regions unless specified. We only use first-party seller links (at the time of article publishing); ensure that you purchase from a first-party seller link only. Check out Today's Deals on Amazon | or our recent tech deals. Become a Prime member (for Students or SNAP) via Neowin Get Prime Access - Prime for half price (for qualifying Medicaid, EBT, SNAP) Subscribe to Prime Video, Audible Plus, Music Unlimited or Kindle Unlimited via Neowin As an Amazon Associate, we earn from qualifying purchases

  • Recent Achievements

    • Reacting Well
      NovaEdgeX earned a badge
      Reacting Well
    • Week One Done
      NovaEdgeX earned a badge
      Week One Done
    • One Year In
      BA the Curmudgeon earned a badge
      One Year In
    • Conversation Starter
      rosiecharles earned a badge
      Conversation Starter
    • First Post
      KMilenkoski1202 earned a badge
      First Post

  • Popular Contributors

    1. 1
      +primortal
      542
    2. 2
      +Edouard
      271
    3. 3
      PsYcHoKiLLa
      152
    4. 4
      Steven P.
      99
    5. 5
      macoman
      66
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!