Re: Need Opinion on the Following Suspicious Activity

Giganews Newsgroups
Subject: Re: Need Opinion on the Following Suspicious Activity
Posted by:  David H. Lipman (DLipman~nospam~@Verizon.Net)
Date: Thu, 17 Aug 2006

From: "Jeff Lloyd" <jbl20…@alltel.net>

| I noticed that even when I have nothing open in Windows XP Pro SP2, there is
| activity galore...see below.  I am not too sure how to address this.
| Spyware software didn't catch anything out of the ordinary and ZoneAlarm
| Firewall did not catch anything sinister either.  There is always net
| activity being received onto my computer even when it is not being used and
| nothing is running.  Please advise if at all possible as to what this is:
| Thanks very much.
|
| Microsoft Windows XP [Version 5.1.2600]
| (C) Copyright 1985-2001 Microsoft Corp.
|
| C:\Documents and Settings\user>netstat
|
| Active Connections
|
|  Proto  Local Address          Foreign Address        State
|  TCP    xppro:1046      64.215.164.234:http    ESTABLISHED
|  TCP    xppro:1047      207.46.20.93:http      ESTABLISHED
|  TCP    xppro:1048      64.4.21.189:https      ESTABLISHED
|  TCP    xppro:2869      192.168.0.1:6063      TIME_WAIT
|  TCP    xppro:2869      192.168.0.1:6064      TIME_WAIT
|  TCP    xppro:2869      192.168.0.1:6065      TIME_WAIT

What's so suspicious ?

HotMail ?
Microsoft ?

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Replies

None

In response to

Need Opinion on the Following Suspicious Activity posted by Jeff Lloyd on Thu, 17 Aug 2006