Guide
1
properly configured computer communicates with the Internet only in two cases: when you are working on the network and when it updates antivirus database or operating system.If you see that the computer will "climb" to the network, it is an occasion to test it.
2
be aware that even protected Antivirus and firewall computer is not invulnerable.Hackers have long learned to deceive the most famous security software, so watch carefully the behavior of the computer and check regularly open ports.
3
To check open ports, open a command prompt: "Start" - "All Programs" - "Accessories" - "Command Prompt."There is an easier way: "Start" - "Run", type cmd, and click OK.Enter at the command prompt netstat -aon, run the uti
lity by pressing Enter.
4
In the first column of the table that appears Set the type of network connection.The second - "Local Address" - you'll see the local addresses and open ports (for the address, after the colon).In the column "External address" the specified network address, which is connected to your computer.
5
Pay attention to the section "Status", showing the connection status: ESTABLISHED - the connection is established.LISTENING - waiting for connection.CLOSE_WAIT - the connection is completed.Finally, the last column - PID - shows the process ID.This is the number under which a particular process appears in the system.
6
Due to the PID you can see what program opens a particular port.For example, you see that you open port 1499, ID - 1580 (you have all the data will be different).Type in the same Command Prompt window, the command tasklist.You will see a list of all the processes, while the second column shows their identifier (PID).Now you need to find in this column you are interested in PID, in this case 1580. Find, look in the left column, the name of the process - let it be AAWService.exe.
7
If you not familiar with the process name, type it in the search engine line.Introduced received information - a process belongs to the software Ad-Aware.Do you have such a program on your computer?Whether it starts automatically at startup?You do it for you?Run Aida64 (Everest) and look at the Startup folder and, if necessary, remove the file Ad-Aware.If you are not worth such a program, AAWService.exe - process trojan masquerading as a popular tool.Use this algorithm to check all other applications, open ports.
8
Pay special attention to the connection with the state LISTENING.The application listens for them to open the port, waiting for connections.Similarly may behave as a "legitimate" program - for example, services, Windows, and Trojan horses, waiting, when they are to be connected.