Hello,

I have been using netstat fairly frequently because I had a trojan (svchost.exe) on my machine a week ago and check if there are any backdoors, crap, etc. Nothing shows up other than http connections but the strangest things are two connections to the localhost (me) on two consecutive ports(usually 1035, 1036). When I first login these two connections are always there, sometimes they switch ips(4451,4450). I ran fport and could not find any processes attached to these ports. What is opening the connection?

edit: ran netstat -ao and found the PID to be mozilla's, why is it creating a connection to me?