Re: Zonealrm: Need to identify the source of outgoing request
- From: "Duane Arnold" <NotME@xxxxxxxxx>
- Date: Fri, 24 Mar 2006 06:27:17 GMT
<cpurvis3@xxxxxxx> wrote in message
news:1143176041.726212.26350@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I'm running ZoneAlarm free version.
Every night (it seems) I have a few ip's that ZoneAlarm is successfully
blocking going out from my pc to port 80 of the following ip's (the
names I got from ip lookups):
63.211.66.76 Level 3 Communications, Inc
146.82.218.144 Global Crossing
69.31.88.54 nLayer Communications, Inc
It appears these hosts are all running AkamaiGHost.
The logs don't indicate which process or program is originating the
request - the log's Program column is always empty.
How can I determine where/what application originated these request?
Should I allow them through?
The fact that I can't see which program/process may be associated with
the outgoing attempts - could this be because I'm using the free
version (not the pro version)?
...thanks for your help!
P.S - I have anti virus sw (from Zonealarm) - there's no indication
it's some kind of a virus.
When you are able to see what program it is that's making the connection
with the tools like Active Port or TCPview, that program may not actually be
the program that's wanting the access and you must drill down or like inside
a running process to see what's running with the process and using it.
Process Explore will allow you to see what programs are using a given
process.
PE Menu/view/show lower pane/ show all DLL's will show you everything that's
running with a process.
You select a process in the upper pane and right-click Properties and get
more info about the running process.
You can right-click a line in the lower pane too.
Prcview (free) use Google does the same thing as PE.
Long
http://www.windowsecurity.com/articles/Hidden_Backdoors_Trojan_Horses_and_Rootkit_Tools_in_a_Windows_Environment.html
Short
http://tinyurl.com/klw1
Duane :)
.
- References:
- Zonealrm: Need to identify the source of outgoing request
- From: cpurvis3
- Zonealrm: Need to identify the source of outgoing request
- Prev by Date: Re: Belkin not-real-firewall?
- Next by Date: How to perform IP address management and how to perform subnetting, i have a good idea
- Previous by thread: Zonealrm: Need to identify the source of outgoing request
- Next by thread: Re: Zonealrm: Need to identify the source of outgoing request
- Index(es):
Relevant Pages
|
