How to find the secretly connecting websites to your computer
There may be a chance that you have some malware, spyware, or adware that is using your Internet connection in the background secretly. Here we will learn how to find secretly connecting websites to your computer.
There is an easy method using the netstat command from a command prompt window. This works with Windows 10, 8, 7, Vista, and XP. If you’re still using XP, make sure you are running at least Service Pack 2.
Here, we will use the netstat command to generate a list of all secret websites that have made an Internet connection in a specified amount of time. To use the netstat command, you must run the command prompt window as an administrator.
If you are using Windows 8 or later, you can right-click on the Start Button and choose the Command Prompt (Admin) option.
If you are on Windows 7 or Vista, open the Start menu and enter “cmd” in the Search box. When the results display, right-click on cmd.exe and select Run as administrator from the popup menu.
At the command prompt, type the following command and press Enter.
netstat -abf 5 > active_conncetion.txt
–a option shows all connections and listening ports, the
–b option shows you what application is making the connection, and the
–f option displays the full DNS name for each connection option for easier understanding of where the connections are being made. The 5 option will poll every 5 seconds for connections to make it more easy to track what is going on, and the results are then piped into the active_conncetion.txt file.
Wait few seconds and then press Ctrl + C to stop the recording.
Once you’ve finished recording, you can simply open the active_conncetion.txt file (In this case, open it from C:\Windows\System32) in your text editor to see the results, or you can type active_conncetion.txt at the command line to open it in Notepad.
The resulting file will list all processes on your computer (browsers, IM clients, email programs, etc.) that have made an internet connection in the recorded time, or however long you waited before pressing Ctrl + C. It also lists which processes connected to which websites.
If you see process names or website addresses with which you are not familiar, you can Google and see what it is. It may be a system function you don’t know about or a function of one of your running programs. However, if it seems like a bad site, you can use Google again to find out how to get rid of it.