Is someone spying my PC?

R

rocknroll

New Member
Hello
I am afraid that someone might be "listening" to my computer.
This someone had some access to my PC in the past, so he might have installed something, I'm not sure. I do know that he managed to get my gmail password somehow. my fear is that he somehow still gets info from my computer.

I did 2 tests:
1) netstat -an:
Active Connections
Proto Local Address Foreign Address State
TCP 0.0.0.0:135 0.0.0.0:0 LISTENING
TCP 0.0.0.0:445 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1028 0.0.0.0:0 LISTENING
TCP 127.0.0.1:5152 0.0.0.0:0 LISTENING
TCP 127.0.0.1:5152 127.0.0.1:1331 CLOSE_WAIT
UDP 0.0.0.0:445 *:*
UDP 0.0.0.0:500 *:*
UDP 0.0.0.0:4500 *:*
UDP MYIP:123 *:*
UDP MYIP:1900 *:*
UDP 127.0.0.1:123 *:*
UDP 127.0.0.1:1900 *:*

2) Task manager - processes under my user name:
avgidsmonitor
taskmgr
explorer
gsicon
dslagent
hpwuschd2
avgtray
jusched
ctfmon
hpqste08
hpqbam08
hpqgpc01
(by the way I closed HP monitor prior to checking the task manager)

Is there something strange in these tests?
What else would you recommand me to do in order to check if someone is spying my PC?

Thank you very much
 
Nope. There's nothing wrong with either of them. They look perfectly normal to me.
 
No, all of those are normal. If you want to make sure that there are no viruses on your computer, things like spyware, malware, and what not, make sure you have a good AV. Norton and Symantec are not that great, there are free alternatives like Avira and Malwarebtyes, if you want to use those to ensure that no one has planted anything on your computer.
 
It's no different to the internal workings of your PC. There is a lot going on even when it is idling. You can find out what the items are by googling the address and port data. Some of them are there due to running netstat. 127.0.0.1 is the loopback - the PC talking to itself. The port numbers you can look up here though you will have to search further to expand on the descriptions.
 
Thank you all for your replies

Is there anything more that I can do (which won't take too much time) to verify that no one spies on my PC?
 
Disconnect permanently from the Internet? Your firewall is the main weapon. You could block all traffic when not directly using the Internet but you have to rely on the firewall when you are online. There is no simple answer to your question.

Investigate any unexpected Internet traffic. That can be difficult as updates and so on are periodically running. I have virtually every automatic Internet task turned off. Even so there are still legitimate tasks that run and are difficult to identify.

The usual anti-malware advice applies. It helps having active anti-malware that asks permission to run any new executable or modification to the registry etc. Initially that is a bit of a nuisance but helps to protect against unauthorized executables running. After a short period, all the main apps have permission to run so you are no longer bothered with the request dialogs. Requires some knowledge to know what should be allowed so it is not foolproof.

You can run new apps in a sandbox until you are sure they are OK.
 
I understand, one more Q

Thanks again.
* What free spyware\malware detection/removal software would u recommand?
* Would it be more difficult to such a software to detect a spyware which might have been installed directly on my PC?

Thank you so much
 
You must log in or register to reply here.
Back
Top