Re: Unknown connections discovered using TCPView

From: Jeff Evenson (jeff@evensonit.com)
Date: 07/04/02 

From: "Jeff Evenson" <jeff@evensonit.com>
Date: Wed, 03 Jul 2002 23:25:12 GMT

Sounds like spyware. Try downloading and running Ad-Aware from
www.lavasoftusa.com It seems pretty good at picking up these phone home
programs.

jeff.

"faze3" <faze3@moc.rr.nitsua> wrote in message
news:T4sT8.5151$eF5.302114@twister.austin.rr.com...
> I just downloaded TCPView from Sysinternals.com, and noticed a few
connections
> that I'm unsure of. When I first open Outlook XP, I see:
>
> agent.exe:3824 TCP greed:4263 updates.digitalwizard.com:http
> SYN_SENT
>
> I've also noticed:
>
> [System Process]:0 TCP greed:4221 razor.pacificnet.net:2703 TIME_WAIT
>
> [System Process]:0 TCP greed:4247 razor.pacificnet.net:2703 TIME_WAIT 4247
>
> And something going to update.digitalwizard.com
>
> The following appears after I close my spyware-stripped version of
> Grokster:
>
> [System Process]:0 TCP greed:4291
> h24-76-252-211.vs.shawcable.net:1214 TIME_WAIT
>
> All of this concerns me, as I've got a LinkSys WAP with NAT firewall. The
only
> ports I have open are (all both TCP and UDP):
>
> 21, 5900, 6346, 113, and 137
>
> Any ideas???
>
> Thanks..
>
> ________________________________________________
> This is my .sig...
>