topic Re: Networking issue in Networking

Networking issue

Jeffrey Knops — Mon, 22 Jan 2007 02:19:35 GMT

Apparently, Netstat is not a valid win32 application. When I enter netstat into the command prompt, a dialogue pops up saying, "c:\windows\system32\netstat.com is not a valid win32 application."
When I click on ok, the prompt tells me that access is denied. Any help on this issue would be greatly appreciated.

//Attached is a screenshot of the command prompt with the dialogue mentioned\\

Re: Networking issue

Jeffrey Knops — Mon, 22 Jan 2007 02:25:53 GMT

sorry, I forgot to attach the file!

Re: Networking issue

Alpha977 — Mon, 22 Jan 2007 06:56:38 GMT

Hello Jeffrey!

What is your OS?

Regards

Re: Networking issue

Rob Leadbeater — Mon, 22 Jan 2007 09:13:01 GMT

Hi Jeffrey,

On Windows NT,2000 and XP, netstat is normally an EXE rather than a COM executable...

Unless you're running Windows 9x/ME, I'd check that you haven't got a virus issue that's "hijacked" the netstat command. Have a look in c:\windows\system32 for netstat.*

Hope this helps,

Regards,

Rob

Re: Networking issue

Ron Kinner — Mon, 22 Jan 2007 10:06:05 GMT

Agree with Rob that you have a bug. Possibly a version of Alcra/Alcan. Usually the bug will create all or some of these:

C:\Program Files\MsConfigs\MsConfigs.exe
C:\WINDOWS\system32\p2pnetwork.exe
C:\WINDOWS\system32\CMD.COM
C:\WINDOWS\system32\netstat.com
C:\WINDOWS\system32\ping.com
C:\WINDOWS\system32\regedit.com
C:\WINDOWS\system32\tasklist.com
C:\WINDOWS\system32\taskkill.com
C:\WINDOWS\system32\taskmgr.com
C:\WINDOWS\system32\tracert.com

If it's Alcra-B you will also have a folder

C:\Program Files\winupdates

but there are many others. (All of the above can be removed.)

Would have to see an HJT log to say for sure which you have (or hopefully had). You can get Hijackthis (HJT) from:

http://tomcoyote.org/hjt/hjt199//HijackThis.exe

Save it to your desktop and run it. It will give you a warning and then go to a menu. Select the top option (Scan and Save LOG). Copy the log from the notepad window that comes up and paste it into a Reply.

Ron