Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help Forums Windows Startup Programs Database Virus, Spyware, and Malware Removal Guides Computer Tutorials Uninstall Database File Database Computer Glossary Computer Resources
 

Welcome Guest ( Log In | Click here to Register a free account now! )



Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

2 Pages V   1 2 >  
Reply to this topicStart new topic
> Performance Systems International, Inc., Anybody know or heard of them?
Buddyme2
post Dec 2 2006, 12:18 AM
Post #1


Forum Regular
***

Group: Members
Posts: 193
Joined: 23-August 06
Member No.: 82,128



I was looking thru the out going logs of my Linksys WRT54G router and I found that my father's PC has an out going signal that showed it's destination as 38.118.85.21 I did a whois search on it from my Intego NetBarrier Firewall app and got this.

Performance Systems International Inc. PSINETA (NET-38-0-0-0-1)
38.0.0.0 - 38.255.255.255
Performance Systems International Inc. COGENT-NB-0002 (NET-38-112-0-0-1)
38.112.0.0 - 38.119.255.255

Who are they, what apps would be transmitting to them? But more importantly, should my father be worried?

Thanks.
Go to the top of the page
 
+Quote Post
Orange Blossom
post Dec 2 2006, 12:38 AM
Post #2


OBleepin Investigator
******

Group: Moderator
Posts: 17,849
Joined: 14-July 06
From: Bloomington, IN
Member No.: 76,150



Is there anything in the log that indicates what program, task, or file is sending out to them?

Is there a way that you can set the firewall to ask the user before letting applications connect to the internet? If so, set it that way to discover what is doing it.

Orange Blossom fruits_cherry.gif


--------------------
Orange Blossom

An ounce of prevention is worth a pound of cure

ESET NOD32, SuperAntiSpyware Pro, SpywareBlaster, Spybot 1.6.2.46, WinPatrol Plus, Sunbelt Personal Firewall - Full, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript
Go to the top of the page
 
+Quote Post
Buddyme2
post Dec 2 2006, 01:51 AM
Post #3


Forum Regular
***

Group: Members
Posts: 193
Joined: 23-August 06
Member No.: 82,128



Orange Blossom,

Thanks for replying.

QUOTE
Is there anything in the log that indicates what program, task, or file is sending out to them?


The only things that are shown on my Linksys logs are LAN IP, Destination URL/IP and Service/Port Number. It was listed as www in the Service/Port Number.

QUOTE
Is there a way that you can set the firewall to ask the user before letting applications connect to the internet? If so, set it that way to discover what is doing it.


From the Linksys? IDK, I don't think so. From my Firewall? No.
Go to the top of the page
 
+Quote Post
Orange Blossom
post Dec 2 2006, 03:44 PM
Post #4


OBleepin Investigator
******

Group: Moderator
Posts: 17,849
Joined: 14-July 06
From: Bloomington, IN
Member No.: 76,150



Hmm. What firewall are you using?

By any chance, are there peer-to-peer programs on the computer? If so which ones?

Orange Blossom fruits_cherry.gif


--------------------
Orange Blossom

An ounce of prevention is worth a pound of cure

ESET NOD32, SuperAntiSpyware Pro, SpywareBlaster, Spybot 1.6.2.46, WinPatrol Plus, Sunbelt Personal Firewall - Full, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript
Go to the top of the page
 
+Quote Post
buddy215
post Dec 2 2006, 03:55 PM
Post #5


Forum Addict
******

Group: Members
Posts: 3,917
Joined: 14-April 06
Member No.: 64,042



Found on the web:

performance systems international... PSI, one of the 'older' ISP's around, based out of N. Virginia ( think they even have/had a stadium named after them - PSI Stadium ).
Go to the top of the page
 
+Quote Post
Orange Blossom
post Dec 2 2006, 04:01 PM
Post #6


OBleepin Investigator
******

Group: Moderator
Posts: 17,849
Joined: 14-July 06
From: Bloomington, IN
Member No.: 76,150



Ah, but is that YOUR internet service provider?

Orange Blossom fruits_cherry.gif


--------------------
Orange Blossom

An ounce of prevention is worth a pound of cure

ESET NOD32, SuperAntiSpyware Pro, SpywareBlaster, Spybot 1.6.2.46, WinPatrol Plus, Sunbelt Personal Firewall - Full, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript
Go to the top of the page
 
+Quote Post
Buddyme2
post Dec 2 2006, 06:28 PM
Post #7


Forum Regular
***

Group: Members
Posts: 193
Joined: 23-August 06
Member No.: 82,128



QUOTE
Hmm. What firewall are you using?

I am using Intego's NetBarrier on my PowerBook G4. My father is using Norton? I'm not quite sure, but he has Norton on his PC.

QUOTE
By any chance, are there peer-to-peer programs on the computer?

I don't think so, he doesn't download very much. Mostly updates to his XP Home, AV and Anti-Spy programs.

QUOTE
Ah, but is that YOUR internet service provider?

It's gci.net.
I never looked to see if my PB is contacting the same IP, I'll look but I'm pretty sure it's not because Little Snitch doesn't show that any of my apps are contacting that IP.

Thanks again.
Go to the top of the page
 
+Quote Post
Orange Blossom
post Dec 3 2006, 03:34 AM
Post #8


OBleepin Investigator
******

Group: Moderator
Posts: 17,849
Joined: 14-July 06
From: Bloomington, IN
Member No.: 76,150



I'm not familiar with that firewall. It's your father's computer that has the problem right? So we need to know which firewall is on HIS computer.

It's possible that there is something on the computer that shouldn't be there making these connections. It's also possible that something that should be there is making connections it shouldn't be, and there is a slim chance it's legit. That's why I want to know which firewall is on the computer that has the problem so it can be set up to ask the user before anything makes connections. That way we can identify the culprit and determine whether it's good, bad, or indifferent and what to do next if anything.

There are free firewalls that can be configured this way and that will identify the application. Zone Alarm Free and Kerio Personal Firewall Free are both examples. I personally prefer the later as it provides more specific information. You might consider installing one of those, uninstalling the other one first, temporarily at least until the problem is solved.

Orange Blossom fruits_cherry.gif


--------------------
Orange Blossom

An ounce of prevention is worth a pound of cure

ESET NOD32, SuperAntiSpyware Pro, SpywareBlaster, Spybot 1.6.2.46, WinPatrol Plus, Sunbelt Personal Firewall - Full, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript
Go to the top of the page
 
+Quote Post
Buddyme2
post Dec 3 2006, 11:12 PM
Post #9


Forum Regular
***

Group: Members
Posts: 193
Joined: 23-August 06
Member No.: 82,128



Orange Blossom,

Yes, it's my father's PC that is connecting. He had a license for Zone Alarm but probably got frustrated with all the "questions" from it, same thing with Spybot. He uninstalled those along with AVG and installed Norton, which has a firewall but I don't think it asks if a signal going out should be denied or not.

NetBarrier is a Mac application.
Go to the top of the page
 
+Quote Post
Budapest
post Dec 4 2006, 05:20 AM
Post #10


Bleepin' Cynic
******

Group: BC Advisor
Posts: 10,531
Joined: 11-November 06
Member No.: 94,959



I understand that if you are using iTunes it will connect to PSI for automatic updates etc.


--------------------
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw
Go to the top of the page
 
+Quote Post
Buddyme2
post Dec 4 2006, 05:51 AM
Post #11


Forum Regular
***

Group: Members
Posts: 193
Joined: 23-August 06
Member No.: 82,128



QUOTE(Budapest @ Dec 4 2006, 01:20 AM) *
I understand that if you are using iTunes it will connect to PSI for automatic updates etc.

He doesn't use iTunes, the only Apple product he has on his PC is Quicktime. Does Quicktime connect to PSI? I would of thought that Mac apps would connect to Apple for updates or whatever.
Go to the top of the page
 
+Quote Post
Budapest
post Dec 4 2006, 06:50 AM
Post #12


Bleepin' Cynic
******

Group: BC Advisor
Posts: 10,531
Joined: 11-November 06
Member No.: 94,959



If I remember correctly Quicktime has advertisements and links that show up when you open it, and it is this third-party content that might come from PSI. I've heard that the programme "Little Snitch" can tell you which application on your system is connecting to PSI, although I've never used it myself.


--------------------
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw
Go to the top of the page
 
+Quote Post
Buddyme2
post Dec 4 2006, 06:58 AM
Post #13


Forum Regular
***

Group: Members
Posts: 193
Joined: 23-August 06
Member No.: 82,128



Little Snitch does tell which application is trying to send a signal out and to where it wants to send it. It's for Macs only and my father's comp is a PC. Could be a program from Quicktime but I have never seen him use Quicktime before, but that doesn't mean he doesn't use it.
Go to the top of the page
 
+Quote Post
Budapest
post Dec 4 2006, 07:06 AM
Post #14


Bleepin' Cynic
******

Group: BC Advisor
Posts: 10,531
Joined: 11-November 06
Member No.: 94,959



Sorry, I didn't realise that Little Snitch is only for Macs. You might want to check his Quicktime settings. The latest versions have an application that runs at start-up and checks for updates etc. First time I installed it I ended up with a little Q symbol in my task bar, but you can set the options so it doesn't run at start-up.


--------------------
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw
Go to the top of the page
 
+Quote Post
Buddyme2
post Dec 4 2006, 12:50 PM
Post #15


Forum Regular
***

Group: Members
Posts: 193
Joined: 23-August 06
Member No.: 82,128



No problem.
Will do, but I've never seen a letter Q on his taskbar nor do I think he's ever updated Quicktime before. Where can I find the list of his start-up items?
Go to the top of the page
 
+Quote Post

2 Pages V   1 2 >
Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



Lo-Fi Version Time is now: 21st November 2009 - 01:29 AM


Advertise   |   About Us   |   Terms of Use   |   Privacy Policy   |   Contact Us   |   Site Map   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Virus Removal Guides

© 2003-2009 All Rights Reserved Bleeping Computer LLC.