Thanks to ghost for the null-byte guideline...I was asking questions all over the place before reading his guide....
One peculiar behaviour I find in my win 10 system is...when I ran the netstat on cmd immediately after it boot up. I notice my router 192.168.1.1 on port let say 'A'. Have a timewait connection on a lot of ports on my pc let say 192.168.1.10. Particularly the end ports 40k above.
So I try learning nmap and port scan my router and I find port 'A' is actually a UPnP port on my router. And it is open. But I already disable the UPnP on my router in the web interface. Why is it still exist?
I am posting here because I am curious... Is my pc hacked??