Foreign IP TCP connected to server
Hi, I have windows server 2003. I have install microsoft defender there and when I checked the tool>software explorer > network connected program. I have seen an MicroSoft IExplorer there although I dont have any i explorer open on my machine. on the other pan its also says that its connect to Foreign IPTCP 202.......... connected. It also saySYN_SENT under the IP. I ended the process so many times but each time when I refresh it , same things appear. I am worried that may be my server has been hacked and something seriousis going on . I checked everything but didn't find any solution . I also checked with C:> netstat command and same IP is showing there with same SYN_SENT. Please help me in getting rid of this Thanks Rick
December 12th, 2007 12:44am

Hi Rick, You could Use ProcessExplorer to find out what is Running that process and where does it Go. I suppose it is some king of program that is trying to reach an Update server or something.. Hope it Helps, Assaf Miron http://Assaf.Miron.googlepages.com
Free Windows Admin Tool Kit Click here and download it now
May 17th, 2009 10:34pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics