{"id":8196,"date":"2021-11-26T15:08:03","date_gmt":"2021-11-26T15:08:03","guid":{"rendered":"https:\/\/lgildv5i97.onrocket.site\/answers\/?post_type=question&#038;p=8196"},"modified":"2021-11-26T15:10:53","modified_gmt":"2021-11-26T15:10:53","slug":"strange-netstat-entry-spynettest-virus","status":"publish","type":"question","link":"https:\/\/computing.net\/answers\/security\/strange-netstat-entry-spynettest-virus\/33325.html","title":{"rendered":"Strange Netstat Entry: Spynettest &#8211; Virus?"},"content":{"rendered":"<p>Hello, I am about to go into a panic if I do not find out what this is and why its happening.<br \/>\nSo I ran netstat -a -p tcp at the command prompt on my windows 7 laptop, to do routine checks of my listening connections and ports. While doing so, all the ports seemed normal but I found an unknown entry and need some reassurance.<\/p>\n<p>This is what netstat entries I found to be wierd:<br \/>\nLocal address Foreign address<br \/>\n192.168.1.66:1031 download:http CLOSE_WAIT<br \/>\n192.168.1.66:1032 vip1:http CLOSE_WAIT<br \/>\n192.168.1.66:1085 spynettest:https ESTABLISHED<\/p>\n<p>I googled this and some hits found that it was a virus, others said it was to do with Microsoft security essentials making you a part of spynet without knowledge. I have an up to date antivirus, antispyware and a firewall blocking all inbound traffic. I&#8217;m pretty sure I am not infected.<\/p>\n<p>Anyone same problem \/ any ideas why this address is being contacted? It never ever happened before, I only just noticed it when I ran netstat this time.<\/p>\n<p>Cheers.<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"iawp_total_views":3},"question-category":[56],"question_tags":[],"class_list":["post-8196","question","type-question","status-publish","hentry","question-category-security"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/question\/8196","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/question"}],"about":[{"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/types\/question"}],"author":[{"embeddable":true,"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/comments?post=8196"}],"wp:attachment":[{"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/media?parent=8196"}],"wp:term":[{"taxonomy":"question-category","embeddable":true,"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/question-category?post=8196"},{"taxonomy":"question_tags","embeddable":true,"href":"https:\/\/computing.net\/answers\/wp-json\/wp\/v2\/question_tags?post=8196"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}