Ok finally goto my machine here is a netstat while I was posting this no other windows open:


C:\>netstat -a

Active Connections

Proto Local Address Foreign Address State
TCP oem:1026 oem:0 LISTENING
UDP oem:isakmp *:*
UDP oem:1027 *:*
UDP oem:1030 *:*
UDP oem:1045 *:*
UDP oem:1150 *:*
UDP oem:1170 *:*
UDP oem:4500 *:*
UDP oem:ntp *:*
UDP oem:ntp *:*
UDP oem:1028 *:*
UDP oem:1301 *:*
UDP oem:1339 *:*

C:\>
C:\>
C:\>
C:\>netstat -ano

Active Connections

Proto Local Address Foreign Address State PID
TCP 127.0.0.1:1026 0.0.0.0:0 LISTENING 164
UDP 0.0.0.0:500 *:* 628
UDP 0.0.0.0:1027 *:* 916
UDP 0.0.0.0:1030 *:* 980
UDP 0.0.0.0:1045 *:* 980
UDP 0.0.0.0:1150 *:* 980
UDP 0.0.0.0:1170 *:* 980
UDP 0.0.0.0:4500 *:* 628
UDP 67.3.229.235:123 *:* 916
UDP 127.0.0.1:123 *:* 916
UDP 127.0.0.1:1028 *:* 916
UDP 127.0.0.1:1301 *:* 2348
UDP 127.0.0.1:1339 *:* 2520

C:\>
C:\>
C:\>
C:\>
C:\>



also the MSDOS window was open

Process ID# 916? whats that?



I did find my messeger service disabled but I had a "HARDWARE"/ "profile1" enabled under the LOGON TAB in the Properties of the Messenger service,

I have since disabled this, I dont think this will effect operations on my own sigle computer? will it? , I will watch and see if the svchost.exe file trys to launch when the port is scanned with a UDP protocol and port 1024-1027???

Maybe this will stop it, by the way the svchost does not try to connect outgoing now, it only says tyhe program is activated like it is ready in case it gets a signal, ya know?




Anyone have any clue what I am babbling about?
will be monitoring this thread , oh ,,...and I did read the tutorial about a similar situation
http://www.antionline.com/showthread...hreadid=264811
"good read"


but not quit the same as what I am posting....Thank in advance for all the help/advice!



the