Computing Staff
  • 0

Strange Netstat Entry: Spynettest – Virus?

  • 0

Hello, I am about to go into a panic if I do not find out what this is and why its happening.
So I ran netstat -a -p tcp at the command prompt on my windows 7 laptop, to do routine checks of my listening connections and ports. While doing so, all the ports seemed normal but I found an unknown entry and need some reassurance.

This is what netstat entries I found to be wierd:
Local address Foreign address
192.168.1.66:1031 download:http CLOSE_WAIT
192.168.1.66:1032 vip1:http CLOSE_WAIT
192.168.1.66:1085 spynettest:https ESTABLISHED

I googled this and some hits found that it was a virus, others said it was to do with Microsoft security essentials making you a part of spynet without knowledge. I have an up to date antivirus, antispyware and a firewall blocking all inbound traffic. I’m pretty sure I am not infected.

Anyone same problem / any ideas why this address is being contacted? It never ever happened before, I only just noticed it when I ran netstat this time.

Cheers.

Share

2 Answers

  1. “Microsoft security essentials forces you to sign up to”
    When I installed, I did not tick that box.
    “I made a registry edit, and stopped security essentials reporting information to Microsoft,”
    Wondered if you knew about that.

    • 0
  2. To check if you are infected with the Spyware Protect/Antispyware types of infections, run Malwarebytes’ Anti-Malware
    http://www.softpedia.com/get/Antivi…
    http://www.softpedia.com/progScreen…
    http://www.malwarebytes.org/mbam.php
    http://www.spywareinfoforum.com/ind…
    Forum
    http://www.malwarebytes.org/forums/
    Error codes
    http://forums.malwarebytes.org/inde…
    Common Issues, Questions, and their Solutions, Frequently Asked Questions.
    http://forums.malwarebytes.org/inde…
    VIPRE Rescue Program
    http://vipre.malwarebytes.org/
    http://live.sunbeltsoftware.com/
    Try it in Safe mode.
    If it won’t run, rename the downloaded mbam-setup.exe file to mb.exe to help work around certain malware that will block it from being run.
    If it still will not run.
    1: Go to Control Panel > Programs and Features and uninstall Malwarebytes.
    Next redownload Malwarebytes but rename it before you download it to your desktop. As you are in the process of downloading when you get to the point that the “enter name of file to save to” box appears, in the “filename” slot, rename mbam-setup.exe to something.exe, then click Save.
    If it installed but will not run, navigate to this folder:
    2: C:\Programs Files\Malwarebytes’ AntiMalware
    At the top of the page, Tools > Folder Options > View, click > Show hidden files and folders and untick > Hide extensions for known file types.
    How to see hidden files in Windows
    http://www.bleepingcomputer.com/tut…
    Rename all the .exe files in the Malwarebytes’ Anti-Malware folder and try to run it again.
    When it opens, update 1st.
    If it won’t update after installing, update manually.
    http://www.malwarebytes.org/mbam/da…
    Download & install.
    • 0