WTF
I looked at my netstat -an and now I feel some like all the work I've done to lock my system down is a waste. mine looks even worse than MemorYs'
Looks like it time to hunt me a trojan if I find it I will post what I get.
Printable View
WTF
I looked at my netstat -an and now I feel some like all the work I've done to lock my system down is a waste. mine looks even worse than MemorYs'
Looks like it time to hunt me a trojan if I find it I will post what I get.
ok nothing unusual in thr registry
no processes running that should not be
nothing detected by nortan or spybot
logs are good
found an ip address that my firewall was allowing that should not have been there??wtf??
blocked it.
if it is a trojan it is hidden very well.
It could be very simple... is it a trojan caled MS Windows???
I'm at work now, but when I get home I'll check my box too...
OK, now I feel really stupid!......I figured out what's going on, after I slept on it last night.
Can you guess what it is? It uses an oddball port number. Come on... no takers? I'll give you a hint.......it routes packets...
Yep......IP proxy!
damn...smacks head with hand...wow i turned off my proxy server and everthing looked normal again. wow I feel dumb now.
I dont run a proxy server.
Do you use something like Proximitron?
Nope, no proxy at all. And right now the AO logo and some pictures won't display, yesterday everything was fine.
What about your ISP having a web cache? (random thought on this).
What is running at the particular time of the initial netstat -na? Have you checked processes say using tlist?
I found this Developer Thread that seems to have similar characteristics. Maybe?