Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: My 'netstat' check is showing strange content

12 Mar 2013   #1
Melita

Windows 7 Home Premium 64bit
 
 
My 'netstat' check is showing strange content

I posted this in the Network and Sharing section two days ago. Senior member 'Pauly' suggested that I post this here for further help. I am copying the contents of that thread below for your perusal and help. I disabled all the plugins and extensions in Firefox but cklads is still showing in the Command Window.

The website clkads.com started opening in my computer, a few months ago, when I clicked on a link in some other web page. It used to burst out in a new window and not as a pop up. I think I was being redirected. I blocked it using the local host 127.0.0.1, in the 'hosts' file. The blocking is completely successful. Whenever cklads tried to open, it opened as a blank window, with a message 'this web page cannot be found'. Now, even the blank page is not appearing. It seems to be perfect block.

Thank you.

My Question

My Operating system is Windows 7 Home Premium with Microsoft Security Essentials installed.

While connected to the internet I did a random 'netstat -f' check using the command window. Please see the attachment. What worries me is the foreign address, clkads.com, against the local address 127.0.0.1 As far as I remember, clkads is a web site that plant cookies, malware, redirect and collect information from the browser. Sometime ago I blocked this web site using 127.0.0.1 in the 'hosts'' file and the blocking has been fully effective since then.

What is the reason this is appearing against 127.0.0.1, in 'netstat' check? Please advice.

Answer 1 from Pauly

try netstat -ano this will give you internal & external ip +PID which you can cross reference to task manager to see the associated program, you may need to go to programs tab>view>select colomns>tick program id>ok

My response

I have done the check. Please see the attachment from Task Manager. The highlighted line is the one with 'cklads' PID from 'netstat -ano' check. This shows only when FireFox is open. 'Cklads' does not show in 'netstat' or Task manager, with IE or Chrome open.

The blocking has been fully successful for many months. In spite of that, this is happening.

Answer 2 from Pauly

Did a bit of research on your problem and it seems its quite commonly downloaded with codec packs and similar items but it seems its only a browser plugin add on have you tried disabling add ons/plugins on your browser. Also this seems to be browser specific, what browser do you use & have you tried other browsers ?

If you still encounter problems you could try posting in the security section where a specialist may be able to help more
System Security - Windows 7 Help Forums




Attached Thumbnails
-net-stat-f.png  
Attached Images
 
My System SpecsSystem Spec
.

12 Mar 2013   #2
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Download AdWareCleaner AdwCleaner Download to your desktop
1.Right-click on adwcleaner.exe and select Run As Administrator to launch the application.
2.Click on Delete button.
3.Confirm each time with OK.
4.Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.
Note: You can find the logfile at C:\AdwCleaner[Sn].txt as well - n is the order number.



Did you happen to download a CODEC to watch a video?
My System SpecsSystem Spec
12 Mar 2013   #3
Melita

Windows 7 Home Premium 64bit
 
 

No sir. I have never downloaded a CODEC.

Can I run AdwCleaner from a USB Drive instead of installing it in my computer? I have never run a programme like this before. Just a bit nervous about it! Specially an application that changes the registry entries.

Regards,
My System SpecsSystem Spec
.


12 Mar 2013   #4
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

AdwCleaner is an executable file not an installation program . You may download it place it into a USB flash drive and run it from there.
My System SpecsSystem Spec
12 Mar 2013   #5
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

When you click on the file to run, click the search button and post the results .... that way we can see what should be deleted.
My System SpecsSystem Spec
16 Mar 2013   #6
Melita

Windows 7 Home Premium 64bit
 
 

Thank you for suggesting a computer scan. I did complete scans using Microsoft Security Essentials, Microsoft Malicious Software Removal Tool and Microsoft Fixit.WinSecurity. All these indicate my computer is clean.

Considering the results of the scans and other information I have received, it seems this problem has something to do with the 'hosts' file entries and is not a security issue.

Best regards,
My System SpecsSystem Spec
16 Mar 2013   #7
cottonball

Windows 7 Home Premium
 
 

Melita,

The Hosts file can get hijacked, and so can your DNS settings.

Here are two programs that may help you:

Repair Hosts File

Repair Winsock & DNS Cache


AdwCleaner is a very good and reputable program. The site from which this program is downloaded is knowledgeable and trustworthy.

We do not cater to trashy stuff. However, if you wish not to run this program, it is your decision.
My System SpecsSystem Spec
17 Mar 2013   #8
Melita

Windows 7 Home Premium 64bit
 
 

Hello Cottonball,

Thank you for these links. I didn't believe that you would recommend any trashy programmes, as you mention in your post. All your help is very much appreciated. It is just that I don't want to run too many scans when it doesn't seem to be indicated at the moment. I will keep these options for any future necessity.

Kind regards,
My System SpecsSystem Spec
17 Mar 2013   #9
cottonball

Windows 7 Home Premium
 
 

Melita,

We understand your concern.

If you need assistance doing repairs manually, without downloading any programs, we will also be glad to assist you.

Otherwise, cheers!
My System SpecsSystem Spec
18 Mar 2013   #10
Melita

Windows 7 Home Premium 64bit
 
 

Quote   Quote: Originally Posted by cottonball View Post
Melita,

We understand your concern.

If you need assistance doing repairs manually, without downloading any programs, we will also be glad to assist you.

Otherwise, cheers!
Thank you for your kind offer. If and when the need arises, I shall certainly take you up on it. I have always had great help from your forum .

It is just that I have this bee in my bonnet about running any programme in my computer. As far as possible I avoid doing it. If it is really necessary of course, I have no choice but to do it.

Best regards,
My System SpecsSystem Spec
Reply

 My 'netstat' check is showing strange content




Thread Tools





Similar help and support threads
Thread Forum
Strange folder content
Hi, I'm new here and I'm not sure if this is the right forum. Anyhow I found one of old folders with strange content inside. Every folder and file inside have strange name (not assigned by me) and I can't delete these files because I get warning that there is a wrong name of the file, and I can't...
General Discussion
Strange files showing in C:\
I have just moticed several items near the top of the file list when I open my hard drive. They have no extensions, and the names are such as 0a126c1e864c71c63efa64. Should they be there nad visible, and as importantly, what are they, and do the need moving or even deleting? I'm guessing the...
General Discussion
My 'netstat' check is showing strange content
My Operating system is Windows 7 Home Premium with Microsoft Security Essentials installed. While connected to the internet I did a random 'netstat -f' check using the command window. Please see the attachment. What worries me is the foreign address, clkads.com, against the local address...
Network & Sharing
Folders icons showing/not showing content
Why is it that sometimes the folders icons show samples of their contents and sometimes not? Check the two images: the first shows Desktop in Windows Explorer; the second shows the desktop itself. http://i47.tinypic.com/wlx8u9.jpg http://i45.tinypic.com/2wnshzc.jpg Any idea on how to...
General Discussion
computer heats up and content is not showing
Hello, My computer is getting really hot lately (CPU can get to 96C/~200F), and I have some weird bugs as well. I have an HP pavilion laptop running Windows 7 Ultimate. Some of the bugs are when SOMETIME I'm trying to delete a big file, it says "discovering..." but doesn't delete anything. When...
General Discussion
Disable folder content from showing in search results!
Hi! I have a folder D:\Folder, and that folder have some pdf, doc .... files. Now I want that if I start search files that in search result I NOT get content of that folder! Thanks!
General Discussion

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 11:45.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App