How to Use NETSTAT & FPORT Command to detect spyware, malware & trojans by Britec

[SuperWestcovina]

i download pskill and fport and then I type into command port and it doesn't recognize as command, program or file? what am I doing wrong?

[lllraverslll]

@Britec09 Thank you!

[shinzengumi]

Hello, great video however I have a question. What does it mean if I find a PID listed on netstat -ano but it is not listed on my task manager PIDs? Thanks!

[12308madman]

what if it tells me that "the requested operation requires elevation" when i type in "netstat -b"

I am admin on this pc so im usure what this means

[hrasco832]

what does it mean if it says TIME_WAIT, in the place of listening or established

[clrathnayake]

Thank you so much. This was very helpful.

I'm using Windows 7 Ultimate and this works perfectly.

Cheers.........!

[BDLTutoriais]

Is this run in windows 7 ultimate?

[manbuchinedu]

Great Job. I love your videos and I have been learning a lot from your videos. How can I get the programs Netstat, Fport and MBRcheck. I have windows XP Media Center on a laptop?

Thank you

[memoryfull21]

excellent video bravo!

[phantom391]

Great Information, Thank's!

[theCIAguy007]

"the requested operation requires elevation" I mean... wtf? O.o pl. help

When I follow and type netstat -b, this thing above shows up?

[iwazerein07]

@theCIAguy007 same for me :/ im using vista . have you found the problem yet?

[theCIAguy007]

@iwazerein07 Yes, I've found it:) Just run it As an admin (right click ---> "Run as administrator" And you should be fine. it worked for me:) and try " netstat -nob " and " netstat 1 " ^^

[clrathnayake]

@theCIAguy007 I had the same problem & I found the solution. What you have to do is just open command prompt as administrator. (Just go to start>All Programs>Accessories> and Right click on Command Prompt and click on "Run as Administrator)

[vajsroj]

HI TELL ME HOW TO CLOSE ACTIV CONNECTION IN CMD

[mistercolkitt]

very hepful thank you!

[Actsofaith]

hi the netstat -b is a nifty tip but can it only be used once,

im jus asking because PID numbers no longer show up when i use this for the second time

[xaxol0]

Wut if u got Norton 360 ????? do u still need to check for malware or spyware????

[pdenist]

This was an awesome video. For someone like myself who is so green it is not funny. I learn a lot!! Thanks from VA!!

[AiDz0r]

Well I've got 15 of Firefox in netstat and fport what happens if the trojan has injected?

[fprecoiil]

COOL! it lists my ipod in the process section!

[UnfoldedTreeLover]

thx man i loved it no viruses thank god

[suspect38mbs]

LIKE 2 15 TOOO 2;21 WAT U SAID NETSTAT -(DEN WAT?????????

[Karloki100]

Great vid best one i have found thank u!

[Britec09]

@Karloki100 your welcome

[poblo10]

Next time you should just infect a virtual machine to give some nubs a full understanding

[AXELOPS]

pip pip cheerio, I'm a green little lizard

[BearHit]

very helpfully video , thanks alot .

btw i got a q , i extracted the 'fport' folder and when i hit Run ...

a cmd window pops up i see some commands then the window closes automatically ?

den i try the fport .. command and ""'fport' is not recognized as an internal or external command,

operable program or batch file."" pops up :S .. i need ya help ..please ?

[Britec09]

@BearHit did you put the fport folder in c: root directory? and then run it for command line?

[gunjin2112]

this is one of the best video tutorials that i've found yet! thanks! :D

[Britec09]

@gunjin2112 your welcome

[chefslot]

Some use, wow very good, just one q? When i do cd \ your begining of the next command starts c:\> mine comes up d:\> could you tell me why, i'm assumeing it's reading d drive ??

[cbrk]

how come i can't see the pid number in the command prompt???

[ACADIENNEXX]

I'm not able to use Netstat -b (not given permission)

Also not able to use FPort - I get the message 'You must have administrator proviledges to run FPort'

Any suggestions?

[Britec09]

@ACADIENNEXX right click command prompt and run as administrator

[ACADIENNEXX]

Great video.  Thanks for your help

[mdr45325]

thanks so much.  very nice video.

[Britec09]

your welcome

[iVuDang]

5 stars my friend

[Britec09]

cheers

[IDudessonI]

THX FOR UPLOADING THIS!

whats when i got no enlisted exes?

[RSyemi14]

wow helped alot

[noname2020x]

Thanks, great video and you hit the nail on the head!

[Britec09]

dont forget to subscribe

[Stewie4321]

Great video Brian, very well narrated and a very useful tutorial....thanks!

[Britec09]

your welcome dont forget to subscribe :)

[onearmfrog]

Great video - Very useful! Thanks!

[Blub0r]

very nice video. helped me a lot!

[Britec09]

Your welcome

[JohnnyRockzzzz]

nope it didnt find it XD idk what u jsut said cause my my mouse is mvoeng again someone said i need to get a rat? whats that orsomthing like

[Britec09]

are you sure its a rootkit? have you scanned with gmer, also moving mouse could be down to a settings problem with your mouse

[JohnnyRockzzzz]

but im still not sure if igot rid of the file or not ill keep makeing sure watching my curso cause he usally jsut moves it slight or a big ammount or when im playing games he will unequip items like bows swords etc armour

[Britec09]

trouble with rootkit is there hard to detect, if I was you, I would do a operating system rebuild, that way your be sure its gone, rootkits let the person come in and out of your computer when they like. But if your sure its gone and you have deleted it then your be fine rescan with rootkit scanner to make sure somethink like gmer

[JohnnyRockzzzz]

and im switching fom internet exploer to firefox some people say it safer

[JohnnyRockzzzz]

was 0 lol.. ok soit was a quick sent back ti was a malware file :o

and it jsut now found a generic trojan what is that? ti was deleted and the other thing it found was disinfected

[JohnnyRockzzzz]

well the panda global protection is pretty intell program it whiped out all the things it found on the pc like mixed up files and it found my umm spyware

and its location is somewere in m app files it ofund i only had 1 spyware and 1 only bad thing spywar of course :D lol and it found some in my windows file a suspicous i sent the files to them and blah blah blah it was in my system 32 files its called updregvc64.exe running out of characters lol ill send more info in messedge remainging chars

[JohnnyRockzzzz]

my point is i cant find the file hes useing its like hes running it in th eback ground or somthing? remeber fully undetectiable from anti virus :O... dundundun....

so woulda anti root kit find it or no?

[JohnnyRockzzzz]

im downloading the one they give a trial for that supports th thing u talked about it detects root kits? panda global heres what it says bassicly

______________________________­__

Panda Global Protection 2010

Enjoy total security and ensure information integrity.

Enjoy optimum security and safeguard your valuable data with Panda Global Protection 2010. It protects you from viruses, spyware, rootkits, hackers, online fraud, identity theft and all other Internet threats.

[JohnnyRockzzzz]

ok well i got panda anti root - kit but it says my operating syste is not supported? wtf DX

[JohnnyRockzzzz]

lolz i need a link remember XD idk which program it is x.x

[JohnnyRockzzzz]

ok um i found out fud it is a fud crpiter hes useing a thing that goes undetected through a antivirus scan for viruses rat an all that stuff which means FUD is Fully UnDetectable so does that meanthere is no hope for me.... :( please help me out i need somthing that can even detect fud

[Britec09]

you can try panda root kit cleaner, sounds like a root kit you got, not easy to get rid of.

try deleting it in safemode in command prompt or use a program call unlocker and kill process.

[JohnnyRockzzzz]

and sorry im giveing so many messdges i jsut wana get rid of him/her lol XD hes even acessed my webcam

[JohnnyRockzzzz]

plus he told me hes useing fud and i cant do nothing about it i have no clue what fud really is? it was fud or somthing like it

[JohnnyRockzzzz]

i know what i got is a trojan cause he is able to control my courso and type and stuff he never told me his name tho always called him self anonymous stopped talking to me resently lol XD

[JohnnyRockzzzz]

i think it might be a program i gav admiin priv so idk can u make a video showing exatcly were to get download wat do to do and all that?

[JohnnyRockzzzz]

ok um i know igot a spyware trojan or what ever not sure which one it is it randomly messes with my pc so im not sure when hes messing with so can you like give me mroe detail to know hat to do

[Britec09]

just run malwarebytes and superantispyware to remove trojans and spyware

[juukame]

very nice vid keep em comin

[Loanie]

I have a established connection, and only one of the PID number is not under 'processes', but under services there is the PID. The name of it is 'Apple Mobile Device', and I tried stoping the service but it says that i cant. Am I safe? Thanks.

[Britec09]

its part of ITunes and Quicktime, should be safe just disable service if you dont want it

[Jamiegillespie]

Great video and description

[Britec09]

Thanks Alot

[TheSoilgirl]

ok, I cant seem to get these fport and skill commands to work. I have downloaded them from the sites in your link. netstat does work as a command prompt, my computer has malware and virus really bad. I know i have the virtumonde virus, cant seem to get rid of it, used sd search and destroy, spyware doctor, and malbytes, all detect and remove only part of the virus. am I doing something wrong with these downloads?

[Britec09]

Hi Soilgirl

Use malwarebytes and superantispyware and vundofix

run them in safemode and you should be all clean. let me know how you get on

Brian

[TheSoilgirl]

ok very frustrated. I have downloaded superantispyware 4 different times and they are all corrupt. it wont even let me open up the file. Vundo fix ran in normal mode and found nothing but isn't available in safe mode. the mallbytes ran in safe, found 46 infections, and says it removed and cleaned successfully. however, vundo is still here. any other suggestions?

[ps3hackerfilms]

woot first post!