Saturday, October 24, 2009

Port being spammed (out connections)?

Recently I stumbled upon a log on the home network admin's computer.


These logs all had my local IP address, but one thing alarmed me.





Overwhelmingly, many, many connections were going outward to many many IP addresses over UDP on port 38374.


There are five logs, each at least 15 pages worth of my IP sending out connections.


What can I do to stop this permanently? What is possibly doing this? and why?


If there is an internet activity monitor that helps me with this, It would be seriously appreciated.


My IP is recorded at least three times more than any of the other two computers on the network, so something could be taking advantage of my internet (hidden advertisement link-click schemes, etc)
Port being spammed (out connections)?
Run Spybot search and destroy, avg antivirus and remove any malicious programs... if for some odd reason the communication continues, block the port on your computer using a firewall.
Port being spammed (out connections)?
It sounds like you have a virus/trojan which is making all of these outbound connections.





Go to a command prompt and execute "netstat -ao". This will list all connections/ports on your computer and list the processes owning them. If you see several UDP/38374 connections check which process owns them and then investigate that process.





Do you have antivirus installed?





-MikeD


Certified network engineer w/ 16 years of experience


No comments:

Post a Comment

 

Bibi Copyright 2008 All Rights Reserved Baby Blog Designed by Ipiet | Web Hosting