Re: a possible virus? - Desktop4.GIF (0/1)

From: Jianping Hua (huajp_at_ee.tamu.edu)
Date: 05/06/04 

Date: Thu, 6 May 2004 15:43:08 -0500

Chuck:

I can't see the figure you post.

Anyway I checked Port Explorer, there is no rapid changing figures
in Sent and /or Received columns in any process. But there are
continuous changes in LAN connection status. I recorded at three
different time spots

Duration: 21:43:22, Sent/Received: 10,194/2,921,159,
Duration: 21:52:28, Sent/Received: 10,424/2,948,033,
Duration: 22:01:49, Sent/Received: 10,511/2,974,900,

The sent might due to outlook express. You can the the receiving
trafic is huge, around 50 packets per second. However in Port Explorer
there is nothing shown:

0, TCP, Local port: 1593, Remote Address: 165.91.245.124, Remote Port: 632,
TIME_WAIT, Sent: ---, Received: ---, Creation: ---
696, UDP, Local port: 2697, Remote Address: *.*.*.*, Remote Port: *,
LISTENING, Sent: ---, Received: ---, Creation: 16:58 05/05/2004
832, TCP, Local port: 1356, Remote Address: 207.46.156.154, Remote Port: 80,
LISTENING, Sent: 2/357, Received: 7/11873, Creation: 07:43 06/05/2004
832, TCP, Local port: 1359, Remote Address: 207.46.156.154, Remote Port:
443, LISTENING, Sent: 8/4567, Received: 45/425045935, Creation: 07:43
06/05/2004
832, TCP, Local port: 1359, Remote Address: 207.46.249.57, Remote Port: 80,
LISTENING, Sent: 3/440, Received: 10/13231, Creation: 07:43 06/05/2004

There first seems to be a computer nearby, but I don't know which.
The second process should by norton antivirus, keep running every
several seconds. The other three by wuauserv.

Maybe there is nothing wrong. I just feel wierd that your computer
is always receive packets.

Thanks for your help.

Jianping

Quantcast