Firewall warnings about services.exe

From: Arthur T. (arthur_at_munged.invalid)
Date: 02/29/04 

Date: Sat, 28 Feb 2004 20:10:30 -0500

     I'm running Win2000 with Outpost as my firewall. (In case
it matters, I'm also using Opera for WWW, Agent for usenet, and
Proxomitron as proxy for Opera.)

     For the last few weeks, I've been getting occasional warning
messages from Outpost that services.exe is requesting an incoming
UDP connection with various IP addresses on various port numbers.
Among the port numbers are 5488, 16162, 31552, 11036.

     I've been blocking each new combination of IP addr and port
#. Once, I tried totally blocking services.exe, but then I
couldn't browse the internet.

     It sounds as though *something* malicious is being
attempted. Since it's from my services.exe, it sounds like it's
coming from me, rather than the outside. That's scary.

     I've run AdAware & Spybot; both say I'm pretty clean. I've
Googled, but I haven't found any other reports of anything like
this, though I can't go through the thousands of hits I get when
I get more than a handful.

     Does anyone have any suggestions of how I should proceed? 

-- 
Arthur T.  - If address is munged, reply to:  ar23hur "at" pobox "dot" com

Relevant Pages

  • Re: Agnitum Outpost
    ... >>>at least a half dozen of the most popular ones before I tried Outpost. ... I think it's the best firewall I've ever used. ... > Opera to access it. ... I would say again to the original poster, download the free ...
    (comp.security.firewalls)
  • Re: ZONEALARM EVOLVES INTO FULL SECURITY TOOL
    ... Does ZAP 3.0 block by falsifying a DNS resolution, ... And it's not like HOSTS or DNSKong ... > proxies like Proxomitron and WebWasher. ... In that case, go with Outpost. ...
    (comp.security.firewalls)
  • Secured PC - disabled IE
    ... I followed a web site the URL of which was posted here, ... and Firefox and Opera seem ... Manual Proxy Configuration ...
    (alt.computer.security)
  • Re: Internet Explorer VS Mozilla Firefox
    ... Ken Blake - Microsoft MVP Windows: ... Opera has a menu to look like IE for pages that require IE. ... You will find that Opera and Proxomitron will meet ... My advice is for the person who just wants to use the Internet is to ...
    (microsoft.public.windowsxp.newusers)
  • Re: Proxy bypass in Opera : security related ?
    ... It might be a 'bug' in Opera/IE or a 'high security' web page. ... Subject: Proxy bypass in Opera: security related? ...
    (Vuln-Dev)