|Subject:||Re: Need Opinion on the Following Suspicious Activity|
|Posted by:||David H. Lipman (DLipman~nospam~@Verizon.Net)|
|Date:||Thu, 17 Aug 2006|
From: "Jeff Lloyd" <jbl20…@alltel.net>
| I noticed that even when I have nothing open in Windows XP Pro SP2, there is
| activity galore...see below. I am not too sure how to address this.
| Spyware software didn't catch anything out of the ordinary and ZoneAlarm
| Firewall did not catch anything sinister either. There is always net
| activity being received onto my computer even when it is not being used and
| nothing is running. Please advise if at all possible as to what this is:
| Thanks very much.
| Microsoft Windows XP [Version 5.1.2600]
| (C) Copyright 1985-2001 Microsoft Corp.
| C:\Documents and Settings\user>netstat
| Active Connections
| Proto Local Address Foreign Address State
| TCP xppro:1046 184.108.40.206:http ESTABLISHED
| TCP xppro:1047 220.127.116.11:http ESTABLISHED
| TCP xppro:1048 18.104.22.168:https ESTABLISHED
| TCP xppro:2869 192.168.0.1:6063 TIME_WAIT
| TCP xppro:2869 192.168.0.1:6064 TIME_WAIT
| TCP xppro:2869 192.168.0.1:6065 TIME_WAIT
What's so suspicious ?
Need Opinion on the Following Suspicious Activity posted by Jeff Lloyd on Thu, 17 Aug 2006