Added: 3 years ago
From: 1Mperios
Views: 69,280
Sort by time | Sort by thread (beta)

Link to this comment:

Share to:

All Comments (194)

Sign In or Sign Up now to post a comment!
  • Established means that a connection over the internet is established! You couldn't spot a hacker between all these applications using the internet!

  • I have only one "established.' Is this some sort of program running in my computer, or is it a hacker? Please respond.

  • mines all apple... damn them

  • how can I find out WHO hacked into my computer? I tried the netstat -b which is supposed to indicate who, but I keep getting the messag "this operation requires evaluation."

  • i have 27 established. i bet i have a virus. but i could be hacked/being hacked right now. anonymous is out there now, it could be them. they hacked the fbi website. who knows whats gonna happen next

  • I closed down all my programs and it seems I still have one that says established. I traced it back to system 32.

    Now what? I'm almost certain I am being hacked, because of the way my computer's been acting up.

  • well tut got my hacker off thanks and im subbing right now

  • how can i find out if my mobile phone is hack

  • although its a WHAT

  • mine has a LOT of established and listening. what does this mean

  • and alot say time -wait toooo

  • Hello tito! nice video. some of my stats were established some were not so how? T_T REALLY NEED HELP !!!

  • wow! i must've really benn hacked, cuz everything has been established... :'(

    

  • Retitle this video, "how to check if your computer was compromised".

  • This is a neat to know, but if you need to run an anti-virus and be sure that you are not compromised, why not just unplug your RJ45 cable(Your internet cable)? It's simple, easy and 100% effective at stopping a connection.

    Not to demean your video, I just think it's a bit misleading.

    Also, the PID of any process is nearly always unique and posting it here does not give people any useable information to help you. You must check the Task Manager without restarting your comp as that changes it.

  • i have zero :D

  • do you even know what netstat means? LOL

    NETSTATISTICS! it shows router connections etc etc rofl this has nothing to do with finding 'hackers'

  • @d4rks33k3rz it will show if their "router" is connected to you.

  • and 4512?

  • what about 1100?

  • I feel sorry for all those who really don't know the truth and how make a difference between a real hacker and a simple application that is trying to check if you need updates. All ESTABELISHED don't mean you have been hacked!!! Do not use this tutorial unless you know what you are doing!

  • @TitoMatosPT Well no, since updates will not be connected to the internet the whole time. However if you constantly see an established appearing through an application then would suggest it's not an update. You need to think this more through my friend.

  • @TitoMatosPT Its helped me. I did a test when my comp was completely clean, i definitely didnt see any establishments. Sadly my comp has started acting up and of course I found some weird things going on in my prompt command that i didnt see the first time. Its now running back smoothly, so its better off to delete simple apps and then add them again..

  • Thank you. This helped me a lot

  • wat does time_wait means??

  • What does it mean when in the Foreign Address column it has the ip as "*:*"

  • Why not use netstat -b? It allows you to see the program's name right away, instead of PID.

    You do need to run CMD in adminsitrator mode though...

    so: start > type CMD > right click > run as administrator.

  • @blocbonbon hey dude thanks alot netstat -b is wonderful :)

  • wow, your so dumb

  • @Stewi1014 idiot

  • When I run Command Prompt and find an established PID, then run task manager, I can't find the PID number anymore. Help ?

  • what does TIME_WAIT mean????

  • @CSjag19 TIMED_WAIT Client enters this state after active close.

  • what does SYN_...... mean?

  • @CSjag19 SYN_SEND or SYN_RECEIVED?

    SYN_SEND Indicates active open.

    SYN_RECEIVED Server just received SYN from the client.

  • Cool vid! But i got tons of 'listening' ones and a close_wait and a time_wait are those good or not?

  • Could anyone please help me out on my active connections? On my firewall i can pull up all my active connections with ips and port #'s. When i run firefox at times these connections spike to over 70 connections under firefox tab and then decrease over time. Most of the transfer bytes of the connections in and out are 62 or 60kb/b while 4 or 5 connections range a bit higher and 1 connection with the highest and appearing to be active. Is this normal, or what does this mean???

  • thanks man your a great help!!! i hope u make more vids and good luck.

  • hii..so when i close all browsers and do this i don't get any 'establish'

    but when browsers or msn are still running ,i get loads of 'establish'

    is this a harm?

  • @soumatee all "established" means is that, that particular port is being used to connect to the internet. If you open programs that use the internet, they will connect to it, therefore establishing a connection through a port. The reason this is useful, is because you can see exactly what processes are connecting to the internet without you knowing it, but in the case of your "browser or msn" you know about it and want it to establish a connection. Don't you? ;-P

  • @1Mperios thanks for the tip.

  • i tried this i have several ""ESTABLISHED "CUZ I DO GO TO SEX SITES..

    BUT MY WINDOWS VISTA IN TASK MANAGER DOESNT SHOW ""SELECT COLUMN"..CAN YOU HELP ME OUT ON THIS..THNX

  • How to remove a hacker the easy way any suggestions I've been HACKED!!

  • Comment removed

  • still i have no hackers. But that doesnt mean that hackers are not on my computers.

    maybe 1 year later, a hacker might show up.

  • @1Mperios i went to a site that said my IP and i watched this and i saw that i had like 30 - 50 ESTABLISHED

  • help my computer shows loads of established what can i do

  • could u dislike and comment bad things on all of SickCinema100 he stole my account plz means alot thanks:)

  • lol worthless

  • THANK YOU VERY MUCH !

  • why the fuck do u have a vista logon screen for your wallpaper?

    also, why the fuck did u set rocketdock to show no fuckin dock shitamajig?

    and last but not least, why the fuck do i use so many goddamn swears in my fucking comments?

  • what does listening mean

  • my task manager is disactivated what that supoz to mean plz help me out !

  • What happens if it says internet explorer is established?

  • thanks ghost dawg

  • Conime.exe (Console IME) (4340 PID) (60 KB) virus?

  • i ve got many established with pid number most of them having same..is it normal??

  • Hello, I saw two 4 digit number after the 'established' ( this could mean two different hack programms) but when i get into my task manager to delet it, i could not find one of the PID numbers, so i deleted the one i did find in my task manager. Later in the day, i did another check and found another 'éstablish' and yet again could not locate it in the task manager.

    Help men!!!

  • I have an established. But first,what do you mean by connection?

  • Great Video dude easy step by step intructions and very helpful Thumbs up to you brother :)

  • i have many established. Yeasterday i was playing css and then someone get my ip adress and then he switch off my steam and he can control my computer i think so. And if my computer is hacked what to do then?

  • God I got hacked.. But I need help how to get my account back :'/

  • this is an awsom vid cheers mate :)

  • alot of people hack my shit time for me to get revenge.

  • ok i got it. thanks!

  • once i open task manager there is no select colums option

    only

    refresh now

    update speed

    large iocons

    small icons

    details

  • I have a Mac, am I hacked? How do I find out if it is hacked? Put w and netstat into terminal, got 5 lines that say Established. Tried to 'copy and paste', but too many characters.

  • I have a Mac, am I hacked? How do I find out if it is hacked?

  • What if my computer is changing diffrent colors and then when i restarted it, it says system restore what do i do???

  • @1mperios what does it mean when its say's time wait or close-wait on the cmd screen? pleas help

  • what does it mean if it says SYN_SENT?

  • also what does syn_sent , time_wait mean ???

  • ohh and the ports are all 5176

    

  • hey i have 9 established but a friends dad said that is ok its just applications accessing the internet and he works with computers but is he wrong ??

  • @BlueXephosfan in the video he said close all programs that are accesing internet.. and then check this netstat stuff. ;)

  • hey i found an established in cmd and when i open task manager i found that is avp , i don't know what is that so u can tell me what is ?

  • THANKS :) IT HELPED ME ALOT :)

  • i can't get red of that established thing , it's always appear when opening my browser or msg.

    plz help :(

  • Cool, If you do this when running IExplorer you get a lot of ESTABLISEDS but i found that i had 0 when I closed everything on my PC

  • o.o i got 3Establisheds

  • hey i was trying to do this but on the task manager i dont have the view column what should i do, and also sometimes it will say established then ill go back and then all the establish are gone

  • is this useful for checking if you're being keylogged too?

  • Thing is each one goes to a different pid everytime i end the proccess i don't like this man ;(

  • Can you help? I have a ESTABLISHED on mine, but I was having the internet running when I did it. There was only one though and I don't know if my PC is hacked.

  • hey, what does this mean???

    foreign adress: my name and ip: ESTABLISHED. is this bad? there are 3 things established and those are the ones with my pc name the rest is TIME_WAIT

  • hi, what if the pid doesn't show on the task manager, what does it mean?

  • there are many at mine that say TIME_WAIT ..

    What is that?

  • @Tassosbabe

    Hi, it means it's waiting to close the application (it's not bad). The only harm that could arise is when you get "ESTABLISHED".

  • @1Mperios ty for your reply!

  • @1Mperios hey, good video it helped a lot but i was wondering something. I opened up netstat and saw i had established to like 3 things. I de-bunked 2 to be programs i was running like Akamia and Hamachi, but there was another and i dont know what it is i went into services and its number isint there and im not sure what it is do you know what i should do?

  • @Poo597

    Hi, when you open Task Manager and go to Processes you will see at the bottom left something that should be checked called "Show processes from all users".

  • @1Mperios hey, thanks lots for the reply, but today I got on to notice i had like 30+ established and i cant find out what they are! i even did what you said. I'm getting worried I just got this computer and it was expensive and im thinking im infected with a virus/ or hacker because ive noticed every once and i while my computer will lock up and i cant move anything and its been running slowly but was fast when i first got it... please help if you can thanks =(

  • @Poo597 You been going into porn sites havnt you go on admit it , your pc has picked up the aids virus and has been infected.

  • @vassilis359995 no =0 i dont use the web much at all really i just download patches and stuff in the topic for games, but im worried because some might of been from a 3rd party site like unoficcial -_-

  • @Poo597 Sorry for the late reply!

    What you could do is type in the PID of some established on google and see if something reveals. Other than that, make sure all your programs/games are closed. The best thing to do is to reformat your PC and make sure the patches you download are 100% safe because nowadays everyone is able to put a virus into anything really. So when you download something on a forum, make sure the user is legit by checking his post count and contributions. Good luck!

  • @1Mperios okay thanks so much for the help I dont think i have a virus now, ive just been cautious because my old pc got a bad virus started off with ads and such then got so bad my pc wouldn't boot up anymore and i had to wipe it clean i never went on that fourm again so thanks next time ill make sure its legit!

  • @1Mperios hi, i saw close_wait wat is it?

  • @1Mperios hey, thanks lots for the reply, but today I got on to notice i had like 30+ established and i cant find out what they are! i even did what you said. I'm getting worried I just got this computer and it was expensive and im thinking im infected with a virus/ or hacker because ive noticed every once and i while my computer will lock up and i cant move anything and its been running slowly but was fast when i first got it... please help if you can thanks =(

  • @1Mperios Great video 1Mperios ..keep up the good work!! Its people like you that keep You Tube sensible :)

  • my start doesn't have run 

  • @chaplin2009 are you using windows 7 or vista? because if you are then you have to your start and in the search thing you tipe "run" and then click on run

    sorry for my english :S

  • hey man great vid but am stuck in the part where you say select culums wat do you mean by that  it does not say that in my computer and i checked i have ALOT OF ESTABLISHED THINGS

  • @rdrmw2

    Hi, when you open Task Manager go to View --> Select Columns.. --> then check PID.

  • @1Mperios Yeah but the only thing is that you need to under "Processes" tab first then click view :)

  • HACKERS NO PLEASE

  • yo i was hacked by NGT x LEGIND a hidin monkey 3 weeks ago and ill pay whoever hackes them 1600 mp do it leave a coment saying u did andill check and add u and telol u the coad

  • Thx, now I'm positive im not being hacked

  • Im on Win 7 it says TIMEWAIT on some, its taht ok

  • @1Mperios YOU GOT SWAG!

  • one of the numbers that showed on the cmd screen didnt show in my task manager, other ids showed, but not that one and it said established. does this mean it is a hacker? im scared because someone earlier said they were going to hack me and then they showed me my webcam, im scared

  • @randa94oxox

    Hi, there's a button on the task manager called: Show processes from all users. Do you have that turned on? Are you using XP, Vista or 7? What do you mean by they showed you your webcam?

  • PLEASE HELP! HI! So I have an active connection which doesn't say "LISTENING", it says "CLOSE WAIT".... So I'm not familiar with that term, what does it mean? Am i safe?

  • @fevertotell00

    Hi, you're safe. Close_Wait means that you just closed the application.

  • @1Mperios hi nice tutoral but I have one questio I put in natstat -ano in and it doesn't work???

  • @squirtlewater

    Hi, you have to type in netstat -ano with an e, net.

  • Thx, detected that no-one hacked my computer.

  • What does TIME_WAIT mean? And what exactly is -ANO? I am kind of pedantic like that, kind of need to know, it's not enough to just know where the command applies. Cheers :)

  • Sir i have window 7 i use the same mathead i found 2 establised conections

    may i know how to get rid of them cuz when i start my tesk masenger there is no PID for the both establised conections plz help thanks

  • Cheers dude how do I get a list of pid codes so I know who the code is with? For example how did you know that 3344 was yahoo straight away?

  • @MrSinister1990 He explains that further in the video.

  • are u from india ?

  • I did this and it said that the command is not valid!

  • Hi. Thanks for the great tutorial. What does it mean if it says 'LISTENING'?

  • Not all ips are bad remember servers have ESTABLISHED because they need to be connected to you in order for your computer to send packets...

  • Will desktop gadgets interfere when testing.

  • @twin29210

    I think so, you could test it out though. Type netstat -no into the cmd and then look the ESTABLISHED connections. Look at their PIDs, open the Task Manager and find those PIDs. If you see that the PID belongs to a gagdet name then you can tell that it's not a hack.

  • TIME_WAIT is not bad.

  • @1Mperios what did you wrote at the run? pls reply ASAP

  • @filipinofear13

    Hi, it's: cmd

  • @1Mperios oh thnx :) someone hacked my pc and the wallpaper of my pc is black now and when i open google chrome its zooming and the Start thing at down it changed fckk

  • TIME_WAIT means that you were connected to something but the connection is closed and waiting for a clear up, e.g. if you close firefox and then do netstat -ano, firefox might show up as TIME_WAIT, depending on your internet connection it might have cleared it up faster than performing afterwards netstat -ano.

  • this is the most useful one so far

  • can someone please help me on the PlayStation Network? I was doing one of those game share things, and they changed my password. I cant get it because they changed the email or b-date as well. PLEASE PLEASE HELP MEE! I would really appreciate it

  • TYVM BRO love u so mutch, dude my key logger said you cant detect me LEMME SEE IF HE COMES BAK ILL TELL U IF HE DOES

  • my9 hea sayx time-wait n close-wait....ix dat bad or smfn???

  • i gt time-wait...ixxat bad???

  • wat dx time-wait mean???ix it smfn bad lyk a syn dat i got hackd or smfn???

  • Well, with the yahoo connection disabled, one would be cut off from watching YouTube then? Is this what would result? I do not know....just trying to find out.

  • Dear Sir,thanks for awesome tutorial,I have done all you recommended and I restlessly have found established PIDs-now 27 ,what shall I do ,continue doing it or what? thanks

  • What does it mean when it says: TIME_WAIT

  • i have about 25 plus item that say time-wait! what does that mean? and when i try to delete anything it say access denied on task manager.

  • Hey man... idk about my situation but I did this and it was all my instant messaging shit exept one. which i couldnt find in task manager. I have found files on my PC that i didnt do.....?

  • i cheaked and i had alot of stablishes...does that mean i have been hacked without me even noticing? btw....what can som do if they hack u?

  • wow i was right i closed google desktop, utorrent, adobe update and list got short by like a billion connections LOL! thanks for the heads up 1Mperios!

  • what if your running torrents could that be it?

  • why is it that when i run this with fire fox open i have alot of extablished connections! yet when i do it with nothing running there are no connections!! ?? is fire fox the problem or what?please respond.

  • OMG IM BEING HACKED LMAO.

  • Is Time_Wait mean your hacked as well? Or is that ok?

    Please reply.

  • what it mean when it says waiting

  • hey i am hacked mam

    plzz help me out

  • I tried that and it says the computer does not recognize internal or external files... Do you know any other methode? Thanks

  • hey please wat did u say...netstart -ano or what i didnt get ur accent like u were breathing on the end of each word. please reply.

  • @donyjaz

    Hello mate, it's: netstat -ano .

    Thanks for your question! I am also going to put the command on the descrption.

  • it is showing that all one's are in the listening state??what this statement means???plz help

  • thx for help dude.

    5/5*

  • I am confused I want to upload a video, all other videos work perfectly fine, but the video im trying to upload will not show up. Its an EMERGENCY help!

  • Does it say anything when you upload it?

  • @1Mperios No, nothing.

  • @agaragarlove What format is the video in and what is the size?

  • @1Mperios What if it says Time_Wait ?

  • i know someone who got hacked. her cursor was moving everywhere and it was clking things. it was not the mouse because we checkedd. can this process on the video help her?

  • Yes, it surely can.

  • @queenszfinest1 yes this process can help... that guy hacked into the pc ... he can take any data any thing he wants to ....  ( :

  • i get listening and timewait not established is that good or bad?

  • what does time wait mean?

  • Got a question. When you select the column in the task manager, do you have to uncheck the other boxes before you check the box for PID or can you keep the original boxes that are already checked and check the PID box? Thank you

  • Yes, you can keep the original boxes checked and check the PID box. In fact, you could check all boxes there are and it would be the same. Basically what the boxes do, is show you more information regarding the processes. Thanks for watching and commenting!.

  • Thank you so much for your user friendly step by step guide. Much appreciated

  • You're welcome. :)

  • Limewire can infect your computer if you click on chat with host and you type something in and send it they are trying to connect to my computer but my ports are not opening for them lol

  • Any software that will connect to the net, will be detected. Not sure about Limewire though. Have you tried to close the cmd and do it again?

    But if a Virus is connected to your computer through the internet then it should easily detect it. Thank for your comment.

  • Good vid