Foreign IP TCP connected to server
Hi,
I have windows server 2003. I have install microsoft defender there and when I checked the tool>software explorer > network connected program. I have seen an MicroSoft IExplorer there although I dont have any i explorer open on my machine. on the other pan its also says that its connect to Foreign IPTCP 202.......... connected. It also saySYN_SENT under the IP. I ended the process so many times but each time when I refresh it , same things appear. I am worried that may be my server has been hacked and something seriousis going on . I checked everything but didn't find any solution . I also checked with C:> netstat command and same IP is showing there with same SYN_SENT. Please help me in getting rid of this
Thanks
Rick
December 12th, 2007 12:44am
Hi Rick,
You could Use ProcessExplorer to find out what is Running that process and where does it Go.
I suppose it is some king of program that is trying to reach an Update server or something..
Hope it Helps,
Assaf Miron
http://Assaf.Miron.googlepages.com
Free Windows Admin Tool Kit Click here and download it now
May 17th, 2009 10:34pm


