netstat –o

Hi

I have spyware on my server. Spyware like spyware nothing what I should worry about. Every time when I have internet speed problem I have to kill process. To check what process generates traffic I use netstat –o command and successfully kill process what fix my problem temporarily.

My problem is I found that netstat –o shows me many strange connections to different external IP addresses on PID 0. Obviously PID 0 is System Idle Process so I wonder what is it and how to kill it.

Thanks for your help.

Find more posts tagged with

SAVE $250 on Your Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View Boot Camps

Comments

RTmarc

SIP is the amount of time the processor is sitting idle. Why would you want to kill that?

tiersten

Connections that are closed end up with PID 0 as they go into the time wait stage. The network stack is just waiting for them to completely die off before removing the connection from its session tables.

PiotrIr

Thanks tiersten, it explains everything.

tiersten wrote: »

Connections that are closed end up with PID 0 as they go into the time wait stage. The network stack is just waiting for them to completely die off before removing the connection from its session tables.