My 'netstat' check is showing strange content


  1. Posts : 290
    Windows 7 Home Premium 64bit
       #1

    My 'netstat' check is showing strange content


    My Operating system is Windows 7 Home Premium with Microsoft Security Essentials installed.

    While connected to the internet I did a random 'netstat -f' check using the command window. Please see the attachment. What worries me is the foreign address, clkads.com, against the local address 127.0.0.1 As far as I remember, clkads is a web site that plant cookies, malware, redirect and collect information from the browser. Sometime ago I blocked this web site using 127.0.0.1 in the 'hosts'' file and the blocking has been fully effective since then.

    What is the reason this is appearing against 127.0.0.1, in 'netstat' check? Please advice.

    Thank you,
    Attached Thumbnails Attached Thumbnails My 'netstat' check is showing strange content-net-stat-f.png  
    Last edited by Melita; 09 Mar 2013 at 14:03. Reason: To include the attachment
      My Computer


  2. Posts : 2,573
    Win7 Ultimate X64
       #2

    try netstat -ano this will give you internal & external ip +PID which you can cross reference to task manager to see the associated program, you may need to go to programs tab>view>select colomns>tick program id>ok
      My Computer


  3. Posts : 290
    Windows 7 Home Premium 64bit
    Thread Starter
       #3

    I have done the check. Please see the attachment from Task Manager. The highlighted line is the one with 'cklads' PID from 'netstat -ano' check. This shows only when FireFox is open. 'Cklads' does not show in 'netstat' or Task manager, with IE or Chrome open.

    The blocking has been fully successful for many months. In spite of that, this is happening.

    Regards,
    Attached Thumbnails Attached Thumbnails My 'netstat' check is showing strange content-tm-firefox.png  
    Last edited by Melita; 10 Mar 2013 at 12:19. Reason: To add content
      My Computer


  4. Posts : 2,573
    Win7 Ultimate X64
       #4

    Did a bit of research on your problem and it seems its quite commonly downloaded with codec packs and similar items but it seems its only a browser plugin add on have you tried disabling add ons/plugins on your browser. Also this seems to be browser specific, what browser do you use & have you tried other browsers ?

    If you still encounter problems you could try posting in the security section where a specialist may be able to help more
    System Security - Windows 7 Help Forums
      My Computer


  5. Posts : 290
    Windows 7 Home Premium 64bit
    Thread Starter
       #5

    I disabled all the plugins and extensions in Firefox but clkads is still appearing in the Command Window. I have posted this in 'System Security' section, as you suggested.

    Thank you for helping.

    Best regards,
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 01:49.
Find Us