It's definitely NBT traffic; the port numbers give it away. Somehow, the Windows file sharing thinks it needs to talk to 92.242.144.2. (And there are a lot of connection attempts because NBT is chatty.)
Wade.
What's going on here? Attempted outgoing connections...
- (Another Scott)
- (11)
- May 1, 2010, 08:35:04 AM EDT
That's wierd.
- (static)
- May 1, 2010, 08:54:31 AM EDT
That IP block belongs to Barefruit, Ltd
- (pwhysall)
- May 1, 2010, 10:32:03 AM EDT
Run Ad-Aware and MS' anti-malware program too
- (lincoln)
- (5)
- May 1, 2010, 01:05:37 PM EDT
My standard tools are . . .
- (Andrew Grygus)
- (4)
- May 1, 2010, 03:34:36 PM EDT
Got a link to it?
- (lincoln)
- (3)
- May 2, 2010, 06:06:02 PM EDT
Re: Got a link to it?
- (folkert)
- (2)
- May 2, 2010, 06:45:49 PM EDT
The ComboFix site is still working.
- (Andrew Grygus)
- May 2, 2010, 09:12:18 PM EDT
thanks
-NT
- (lincoln)
- May 3, 2010, 01:41:41 PM EDT
With 2000 you'll need tcpview
- (scoenye)
- May 1, 2010, 11:06:50 PM EDT
XKCD has the answer.
- (Another Scott)
- (1)
- May 19, 2010, 08:22:35 AM EDT
lol...
-NT
- (static)
- May 20, 2010, 07:55:01 PM EDT