Conexiones Lentas

MoRiBuNdO #1 Sep '16

Vereis desde hace unos dias el portatil que usamos para la oficina me va bastante lento.. Lo achacaba a que el router wifi estaba en sus ultimas tras 10 años conectado 24/7..

Me dio por hacer un netstat y sale esto:

spoiler

C:\Users\LF>netstat

Conexiones activas

Proto Dirección local Dirección remota Estado
TCP 192.168.1.101:55349 msnbot-191-232-139-111:https ESTABLISHED
TCP 192.168.1.101:55350 msnbot-191-232-139-138:https ESTABLISHED
TCP 192.168.1.101:55353 msnbot-191-232-139-66:https ESTABLISHED
TCP 192.168.1.101:55354 msnbot-191-232-139-63:https ESTABLISHED
TCP 192.168.1.101:55356 wq-in-f125:https ESTABLISHED
TCP 192.168.1.101:55534 93.184.219.82:http TIME_WAIT
TCP 192.168.1.101:55597 a23-37-163-47:http TIME_WAIT
TCP 192.168.1.101:55610 a23-60-214-148:http TIME_WAIT
TCP 192.168.1.101:55626 151.101.60.193:http TIME_WAIT
TCP 192.168.1.101:55627 a88-221-47-87:http TIME_WAIT
TCP 192.168.1.101:55628 a88-221-47-87:http TIME_WAIT
TCP 192.168.1.101:55635 2.22.234.9:http TIME_WAIT
TCP 192.168.1.101:55636 151.101.16.68:http TIME_WAIT
TCP 192.168.1.101:55637 a88-221-47-87:http TIME_WAIT
TCP 192.168.1.101:55638 a88-221-47-87:http TIME_WAIT
TCP 192.168.1.101:55639 a88-221-47-87:http TIME_WAIT
TCP 192.168.1.101:55640 a88-221-47-87:http TIME_WAIT
TCP 192.168.1.101:55641 a88-221-47-87:http TIME_WAIT
TCP 192.168.1.101:55649 a104-75-104-76:http TIME_WAIT
TCP 192.168.1.101:55660 40:http TIME_WAIT
TCP 192.168.1.101:55707 185.29.134.91:http TIME_WAIT
TCP 192.168.1.101:55710 blip:http TIME_WAIT
TCP 192.168.1.101:55727 62.216.247.227:http TIME_WAIT
TCP 192.168.1.101:55739 a23-37-163-162:http TIME_WAIT
TCP 192.168.1.101:55742 40:http TIME_WAIT
TCP 192.168.1.101:55750 104.193.82.53:http TIME_WAIT
TCP 192.168.1.101:55751 mad01s26-in-f174:https TIME_WAIT
TCP 192.168.1.101:55756 mad01s26-in-f3:https TIME_WAIT
TCP 192.168.1.101:55757 84:http TIME_WAIT
TCP 192.168.1.101:55761 84:8080 TIME_WAIT
TCP 192.168.1.101:55762 84:8080 TIME_WAIT
TCP 192.168.1.101:55764 mad01s26-in-f161:https TIME_WAIT
TCP 192.168.1.101:55765 mad01s26-in-f174:https ESTABLISHED
TCP 192.168.1.101:55776 mad01s26-in-f174:https TIME_WAIT
TCP 192.168.1.101:55781 ec2-52-58-204-172:https ESTABLISHED

el 90% de esas conexiones es mierda pura?? Me estan robando?? He sido boteado??

Ayuda please.

AikonCWD #2 Sep '16 Git Gud

Que va, son colexiones "normales" dentro de un SO Windows... prueba el siguiente comando:

netstat -anb > C:\output.txt

Luego copia el contenido de C:\output.txt a pastebin y compártelo. Verás las conexiones desde/hacia tu PC y el proceso ejecutable que las mantiene. Si sospechas de mierda pasa un adwcleaner y a correr.

1 respuesta

MoRiBuNdO #3 Sep '16

#2 No tengo ni idea de cuales son las conexiones normales en win10..

Te dejo aqui el resultado, si me puedes decir si todo va correcto te lo agradeceria.

spoiler



Conexiones activas

  Proto  Direcci¢n local        Direcci¢n remota       Estado
  TCP    0.0.0.0:135            0.0.0.0:0              LISTENING
  RpcSs
 [svchost.exe]
  TCP    0.0.0.0:445            0.0.0.0:0              LISTENING
 No se puede obtener informaci¢n de propiedad
  TCP    0.0.0.0:49664          0.0.0.0:0              LISTENING
 No se puede obtener informaci¢n de propiedad
  TCP    0.0.0.0:49665          0.0.0.0:0              LISTENING
  EventLog
 [svchost.exe]
  TCP    0.0.0.0:49666          0.0.0.0:0              LISTENING
  Schedule
 [svchost.exe]
  TCP    0.0.0.0:49667          0.0.0.0:0              LISTENING
 [lsass.exe]
  TCP    0.0.0.0:49668          0.0.0.0:0              LISTENING
 [spoolsv.exe]
  TCP    0.0.0.0:49671          0.0.0.0:0              LISTENING
 No se puede obtener informaci¢n de propiedad
  TCP    127.0.0.1:2559         0.0.0.0:0              LISTENING
 [daemonu.exe]
  TCP    127.0.0.1:4370         0.0.0.0:0              LISTENING
 [SpotifyWebHelper.exe]
  TCP    127.0.0.1:4380         0.0.0.0:0              LISTENING
 [SpotifyWebHelper.exe]
  TCP    192.168.1.101:139      0.0.0.0:0              LISTENING
 No se puede obtener informaci¢n de propiedad
  TCP    192.168.1.101:55925    191.232.139.63:443     ESTABLISHED
  ProfSvc
 [svchost.exe]
  TCP    192.168.1.101:55942    191.232.139.59:443     ESTABLISHED
 [Explorer.EXE]
  TCP    192.168.1.101:56405    52.31.236.222:443      CLOSE_WAIT
 [wwahost.exe]
  TCP    192.168.1.101:56406    52.210.149.164:443     CLOSE_WAIT
 [wwahost.exe]
  TCP    192.168.1.101:56407    23.37.171.27:80        CLOSE_WAIT
 [wwahost.exe]
  TCP    192.168.1.101:56408    23.37.171.27:80        CLOSE_WAIT
 [wwahost.exe]
  TCP    192.168.1.101:56409    52.51.147.70:443       CLOSE_WAIT
 [wwahost.exe]
  TCP    192.168.1.101:56410    52.51.95.138:443       CLOSE_WAIT
 [wwahost.exe]
  TCP    192.168.1.101:56411    52.51.95.138:443       CLOSE_WAIT
 [wwahost.exe]
  TCP    192.168.1.101:56412    23.37.160.127:443      CLOSE_WAIT
 [wwahost.exe]
  TCP    192.168.1.101:56413    23.37.160.127:443      CLOSE_WAIT
 [wwahost.exe]
  TCP    192.168.1.101:56414    23.37.160.127:443      CLOSE_WAIT
 [wwahost.exe]
  TCP    192.168.1.101:56415    23.37.160.127:443      CLOSE_WAIT
 [wwahost.exe]
  TCP    192.168.1.101:56416    52.51.95.138:443       CLOSE_WAIT
 [wwahost.exe]
  TCP    192.168.1.101:56417    52.51.95.138:443       CLOSE_WAIT
 [wwahost.exe]
  TCP    192.168.1.101:56455    64.233.166.188:5228    ESTABLISHED
 [chrome.exe]
  TCP    192.168.1.101:56457    74.125.206.125:443     ESTABLISHED
 [chrome.exe]
  TCP    192.168.1.101:56618    2.22.234.8:80          ESTABLISHED
 [chrome.exe]
  TCP    192.168.1.101:56631    151.101.16.129:80      ESTABLISHED
 [chrome.exe]
  TCP    192.168.1.101:56641    104.244.42.72:443      ESTABLISHED
 [chrome.exe]
  TCP    192.168.1.101:56668    216.58.214.174:443     ESTABLISHED
 [chrome.exe]
  TCP    192.168.1.101:56674    93.93.179.139:443      TIME_WAIT
  TCP    192.168.1.101:56679    204.79.197.200:443     TIME_WAIT
  TCP    192.168.1.101:56681    52.28.42.57:443        ESTABLISHED
 [gzserv.exe]
  TCP    192.168.1.101:56683    204.79.197.200:443     TIME_WAIT
  TCP    192.168.1.101:56684    204.79.197.200:443     TIME_WAIT
  TCP    192.168.1.101:56685    204.79.197.200:443     TIME_WAIT
  TCP    192.168.1.101:56686    204.79.197.200:443     ESTABLISHED
 [SearchUI.exe]
  TCP    192.168.1.101:56687    204.79.197.200:443     ESTABLISHED
 [SearchUI.exe]
  TCP    192.168.1.101:56689    207.46.7.252:80        ESTABLISHED
 [OneDrive.exe]
  TCP    192.168.1.101:56691    204.79.197.200:443     ESTABLISHED
 [SearchUI.exe]
  TCP    192.168.1.101:56692    204.79.197.200:443     ESTABLISHED
 [SearchUI.exe]
  TCP    192.168.1.101:56693    216.58.214.163:443     ESTABLISHED
 [chrome.exe]
  TCP    [::]:135               [::]:0                 LISTENING
  RpcSs
 [svchost.exe]
  TCP    [::]:445               [::]:0                 LISTENING
 No se puede obtener informaci¢n de propiedad
  TCP    [::]:49664             [::]:0                 LISTENING
 No se puede obtener informaci¢n de propiedad
  TCP    [::]:49665             [::]:0                 LISTENING
  EventLog
 [svchost.exe]
  TCP    [::]:49666             [::]:0                 LISTENING
  Schedule
 [svchost.exe]
  TCP    [::]:49667             [::]:0                 LISTENING
 [lsass.exe]
  TCP    [::]:49668             [::]:0                 LISTENING
 [spoolsv.exe]
  TCP    [::]:49671             [::]:0                 LISTENING
 No se puede obtener informaci¢n de propiedad
  TCP    [::1]:49700            [::]:0                 LISTENING
 [jhi_service.exe]
  UDP    0.0.0.0:123            *:*                    

  W32Time
 [svchost.exe]
  UDP    0.0.0.0:5050           *:*                    

  CDPSvc
 [svchost.exe]
  UDP    0.0.0.0:5353           *:*                    

 [chrome.exe]
  UDP    0.0.0.0:5353           *:*                    

  Dnscache
 [svchost.exe]
  UDP    0.0.0.0:5353           *:*                    

 [chrome.exe]
  UDP    0.0.0.0:5353           *:*                    

 [chrome.exe]
  UDP    0.0.0.0:5355           *:*                    

  Dnscache
 [svchost.exe]
  UDP    0.0.0.0:54072          *:*                    

 [gzserv.exe]
  UDP    0.0.0.0:63836          *:*                    

 [chrome.exe]
  UDP    127.0.0.1:1900         *:*                    

  SSDPSRV
 [svchost.exe]
  UDP    127.0.0.1:48000        *:*                    

 [daemonu.exe]
  UDP    127.0.0.1:62536        *:*                    

  SSDPSRV
 [svchost.exe]
  UDP    192.168.1.101:137      *:*                    

 No se puede obtener informaci¢n de propiedad
  UDP    192.168.1.101:138      *:*                    

 No se puede obtener informaci¢n de propiedad
  UDP    192.168.1.101:1900     *:*                    

  SSDPSRV
 [svchost.exe]
  UDP    192.168.1.101:62535    *:*                    

  SSDPSRV
 [svchost.exe]
  UDP    192.168.1.101:63837    *:*                    

 [chrome.exe]
  UDP    [::]:123               *:*                    

  W32Time
 [svchost.exe]
  UDP    [::]:5353              *:*                    

 [chrome.exe]
  UDP    [::]:5353              *:*                    

  Dnscache
 [svchost.exe]
  UDP    [::]:5353              *:*                    

 [chrome.exe]
  UDP    [::]:5355              *:*                    

  Dnscache
 [svchost.exe]
  UDP    [::1]:1900             *:*                    

  SSDPSRV
 [svchost.exe]
  UDP    [::1]:62534            *:*                    

  SSDPSRV
 [svchost.exe]
  UDP    [fe80::4c7f:8c:faca:29c4%14]:1900  *:*                    

  SSDPSRV
 [svchost.exe]
  UDP    [fe80::4c7f:8c:faca:29c4%14]:62533  *:*                    

  SSDPSRV
 [svchost.exe]

Khrixso #4 Sep '16

Has limpiado el archivo host de c:\windows\system32\drivers\etc?

Conexiones Lentas

Usuarios habituales

Tags