请大大们看看我电脑里的端口使用情况 bbs.ikaka.com

五只虫 - 2009-5-14 2:44:00

Active Connections
Proto Local Address Foreign Address State
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1041 0.0.0.0:0 LISTENING
TCP 0.0.0.0:6059 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1041 127.0.0.1:2808 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2809 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2812 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2814 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2816 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2818 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2819 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2822 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2823 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2826 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2828 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2830 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2832 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2834 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2836 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2838 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2840 CLOSE_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2841 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2844 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2846 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2848 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2851 ESTABLISHED
TCP 127.0.0.1:1041 127.0.0.1:2853 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2854 ESTABLISHED
TCP 127.0.0.1:1041 127.0.0.1:2857 ESTABLISHED
TCP 127.0.0.1:1041 127.0.0.1:2861 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2865 ESTABLISHED
TCP 127.0.0.1:1041 127.0.0.1:2867 ESTABLISHED
TCP 127.0.0.1:1041 127.0.0.1:2869 ESTABLISHED
TCP 127.0.0.1:1041 127.0.0.1:2871 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2883 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2885 ESTABLISHED
TCP 127.0.0.1:1041 127.0.0.1:2899 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2903 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2907 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2915 ESTABLISHED
TCP 127.0.0.1:1041 127.0.0.1:2917 ESTABLISHED
TCP 127.0.0.1:1041 127.0.0.1:2919 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2920 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2923 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2931 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2932 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2935 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2937 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2938 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2941 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2942 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2947 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2949 ESTABLISHED
TCP 127.0.0.1:1041 127.0.0.1:2951 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2953 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2955 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2957 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2959 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2961 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2965 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2966 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2968 TIME_WAIT
TCP 127.0.0.1:1041 127.0.0.1:2973 TIME_WAIT
TCP 127.0.0.1:1042 0.0.0.0:0 LISTENING
TCP 127.0.0.1:2360 127.0.0.1:1041 CLOSE_WAIT
TCP 127.0.0.1:2430 127.0.0.1:1041 CLOSE_WAIT
TCP 127.0.0.1:2840 127.0.0.1:1041 FIN_WAIT_2
TCP 127.0.0.1:2851 127.0.0.1:1041 ESTABLISHED
TCP 127.0.0.1:2854 127.0.0.1:1041 ESTABLISHED
TCP 127.0.0.1:2857 127.0.0.1:1041 ESTABLISHED
TCP 127.0.0.1:2865 127.0.0.1:1041 ESTABLISHED
TCP 127.0.0.1:2867 127.0.0.1:1041 ESTABLISHED
TCP 127.0.0.1:2869 127.0.0.1:1041 ESTABLISHED
TCP 127.0.0.1:2885 127.0.0.1:1041 ESTABLISHED
TCP 127.0.0.1:2915 127.0.0.1:1041 ESTABLISHED
TCP 127.0.0.1:2917 127.0.0.1:1041 ESTABLISHED
TCP 127.0.0.1:2949 127.0.0.1:1041 ESTABLISHED
TCP 192.168.1.2:139 0.0.0.0:0 LISTENING
TCP 192.168.1.2:2572 62.231.28.52:80 FIN_WAIT_1
TCP 192.168.1.2:2575 62.231.28.51:80 FIN_WAIT_1
TCP 192.168.1.2:2761 64.233.189.155:80 TIME_WAIT
TCP 192.168.1.2:2776 96.17.109.49:80 TIME_WAIT
TCP 192.168.1.2:2777 96.17.109.73:80 FIN_WAIT_1
TCP 192.168.1.2:2842 174.129.236.113:80 FIN_WAIT_1
TCP 192.168.1.2:2852 121.14.89.14:80 ESTABLISHED
TCP 192.168.1.2:2856 121.14.89.14:80 ESTABLISHED
TCP 192.168.1.2:2858 121.14.90.42:80 ESTABLISHED
TCP 192.168.1.2:2866 220.181.43.120:80 ESTABLISHED
TCP 192.168.1.2:2868 220.181.38.80:80 ESTABLISHED
TCP 192.168.1.2:2870 220.181.38.80:80 ESTABLISHED
TCP 192.168.1.2:2886 220.181.38.80:80 ESTABLISHED
TCP 192.168.1.2:2916 220.181.43.128:80 ESTABLISHED
TCP 192.168.1.2:2918 220.181.43.128:80 ESTABLISHED
TCP 192.168.1.2:2930 220.181.38.74:80 FIN_WAIT_1
TCP 192.168.1.2:2950 220.181.43.128:80 ESTABLISHED
TCP 192.168.1.2:3642 64.233.189.155:80 TIME_WAIT
UDP 0.0.0.0:445 *:*
UDP 0.0.0.0:500 *:*
UDP 0.0.0.0:1026 *:*
UDP 0.0.0.0:1122 *:*
UDP 0.0.0.0:1123 *:*
UDP 0.0.0.0:1124 *:*
UDP 0.0.0.0:1125 *:*
UDP 0.0.0.0:1126 *:*
UDP 0.0.0.0:1127 *:*
UDP 0.0.0.0:1128 *:*
UDP 0.0.0.0:1129 *:*
UDP 0.0.0.0:1130 *:*
UDP 0.0.0.0:1190 *:*
UDP 0.0.0.0:1327 *:*
UDP 0.0.0.0:1399 *:*
UDP 0.0.0.0:1404 *:*
UDP 0.0.0.0:1435 *:*
UDP 0.0.0.0:1651 *:*
UDP 0.0.0.0:1654 *:*
UDP 0.0.0.0:1657 *:*
UDP 0.0.0.0:1662 *:*
UDP 0.0.0.0:1663 *:*
UDP 0.0.0.0:1666 *:*
UDP 0.0.0.0:1695 *:*
UDP 0.0.0.0:1726 *:*
UDP 0.0.0.0:1785 *:*
UDP 0.0.0.0:1790 *:*
UDP 0.0.0.0:1884 *:*
UDP 0.0.0.0:1919 *:*
UDP 0.0.0.0:2115 *:*
UDP 0.0.0.0:2118 *:*
UDP 0.0.0.0:2193 *:*
UDP 0.0.0.0:2439 *:*
UDP 0.0.0.0:2440 *:*
UDP 0.0.0.0:2981 *:*
UDP 0.0.0.0:4000 *:*
UDP 0.0.0.0:4054 *:*
UDP 0.0.0.0:4440 *:*
UDP 0.0.0.0:4500 *:*
UDP 0.0.0.0:4548 *:*
UDP 0.0.0.0:5354 *:*
UDP 0.0.0.0:5357 *:*
UDP 0.0.0.0:13049 *:*
UDP 127.0.0.1:123 *:*
UDP 127.0.0.1:1046 *:*
UDP 127.0.0.1:1176 *:*
UDP 127.0.0.1:1900 *:*
UDP 127.0.0.1:2850 *:*
UDP 192.168.1.2:123 *:*
UDP 192.168.1.2:137 *:*
UDP 192.168.1.2:138 *:*
UDP 192.168.1.2:1900 *:*

是不是已中招。需要怎么解决

附件: 端口扫描.txt

帅哥阿福 - 2009-5-14 9:14:00

这个怎么看啊。
楼主可自行查看可疑端口对应的pid值，记录下此值后，打开任务管理器查看对应的进程名称。

沉很 - 2010-7-24 17:06:00

有些杀软等等的都需要开启相关端口监听的，建议关闭所有软件和服务，然后再看看端口情况

asmreg - 2010-7-25 17:12:00

目前来看都很正常。

追梦女孩 - 2010-7-30 21:33:00

LZ开启的服务好多啊！每个服务都对应一个端口。在显示ip地址的地方，如果没有使用网关，就会出现一个星号（*）或者0.0.0.0；在显示端口号的地方，如果端口尚未建立,端口以星号(*)显示。
服务端口重点要看的是LISTENING状态和ESTABLISHED状态，LISTENING是本机开了哪些端口， ESTABLISHED是谁在访问你的机器，从哪个地址访问的。
客户端口的SYN_SENT状态和ESTABLISHED状态，SYN_SENT是本机向其它计算机发出的连接请求，一般这个状态存在的时间很短，但如果本机发出了很多SYN_SENT，那可能就是中毒了。看ESTABLISHED状态是要发现本机正在和哪个机器传送数据，主要看是不是一个正常程序发起的。

瑞星卡卡安全论坛