hopefully somebody can give me some insight...
Hello all, I've returned to you guru's here at AO with another one of my questions.
Today as I was downloading music using Kazaa Lite I decided to do a "netstat" for no reason other than I was bored and wanted to see all the hostnames go scrolling by. (Pathetic huh ;) )
Anyways, as the list scrolled by something caught my eye. It said under remote connections that "rickslaptop" was connected on port 3439 TCP. I googled for 'TCP port 3439' and learned that the port is an HRI interface port. I've included a screenshot of the netstat output if you want to see for yourself. I most likely would not have noticed but "rickslaptop" was the only thing that was provided as a remote name. I know it wasnt anybody from inside my home network, because we have no computers with that hostname. If it helps any I'm on a Cable connection behind a Netgear MR314 running Windows XP home.
http://www.imagestation.com/picture/...6/fca4c0f1.jpg
Some things I'm hoping you all can answer for me.
1. What is an HRI interface port and what, if any, risks does it pose?
2. How did this remote computer connect to me with just the name "rickslaptop"? (no domain)
3. What process should I go through to make sure this doesnt happen again (assuming its a threat)
Thanks in advance.
Jonesy
