[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RE: question from a newbie regarding possible trojan



> Sep 17 00:21:41 <my ip>:1489 -> 207.46.197.113:80 SYN ******S*
> Sep 17 00:21:42 <my ip>:1501 -> 207.46.197.113:80 SYN ******S*
> Sep 17 00:21:58 <my ip>:1502 -> 207.46.196.102:80 SYN ******S*
> Sep 17 00:21:58 <my ip>:1503 -> 207.46.196.102:80 SYN ******S*
> Sep 17 00:21:58 <my ip>:1504 -> 207.68.184.62:80 SYN ******S*
> Sep 17 00:22:22 <my ip>:1505 -> 207.46.235.162:80 SYN ******S*
this is your IE opening It's default www.msn.com homepage. You may want
to change your default page to a blank page.

> Sep 17 00:24:21 <my ip>:1507 -> 24.71.223.43:110 SYN ******S*
> Sep 17 00:24:24 <my ip>:1511 -> 142.58.120.21:110 SYN ******S*
This is you checking your POP3 accounts on mail.sfu.ca
and right afrer it checking your other account on
shawmail.nb.shawcable.net. or mail.nb.shawcable.net. or
shawmail.cg.shawcable.net.

> Sep 17 00:25:49 <my ip>:1514 -> 207.46.235.150:80 SYN ******S*
msdownload.microsoft.com. no comment

> Sep 17 00:25:55 <my ip>:1516 -> 209.11.107.14:80 SYN ******S*
did you browse Guardian Digital's web site? :)

I bet that you use this machine for NAT or a firewall to your internal
windows PC.



Reply to: