Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Tcpview. What Not, What Should Be There


  • Please log in to reply
4 replies to this topic

#1 4InTheMorning

4InTheMorning

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:05:49 AM

Posted 08 December 2007 - 12:31 AM

TCP
Alg.exe
svchost.exe
Sytem 4 (x2)
[System proccess]:thumbsup:

(My IP)
RPS (IP)
rpsupdater (IP)

UDP
Iexplorer.exe
Isass.exe (x2)
svchost.exe (x6)
System 4 (x3)

All the UDP's have *:* as the remote address
Tell me this is all normal.

Occassionaly i catch the odd IP numbers and copy them down for tracing, or my scanner will keep some not all in its log.

This is after the damned thing finaly settles down, there is other stuff going on but they dont stay for long.

BC AdBot (Login to Remove)

 


m

#2 trevorveasey

trevorveasey

  • Members
  • 83 posts
  • OFFLINE
  •  
  • Location:AVON PARK, FL
  • Local time:12:49 AM

Posted 08 December 2007 - 03:41 AM

rpsupdater - is mcafee updater

svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated. Usaully there is more than one running

Issas.exe is possibly a worm, but lssas.exe isn't. Did you type it in or copy and paste it?

alg.exe is a process belonging to Microsoft Windows Operating System. It is a core process for Microsoft Windows Internet Connection sharing and Internet connection firewall. This program is important for the stable and secure running of your computer and should not be terminated.

RPS - known as RadialPointServices (rps) which is PC Guard for blueyonder

Edited by trevorveasey, 08 December 2007 - 03:43 AM.

Trevor

#3 4InTheMorning

4InTheMorning
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:05:49 AM

Posted 08 December 2007 - 06:00 AM

lsass.exe: UDP teamworkf:isakmp *:*

yeah its the PCGuard that is the RPS and rpsupdater.

Thank you :thumbsup:

#4 trevorveasey

trevorveasey

  • Members
  • 83 posts
  • OFFLINE
  •  
  • Location:AVON PARK, FL
  • Local time:12:49 AM

Posted 08 December 2007 - 06:47 AM

Your welcome! Happy Holidays!
Trevor

#5 4InTheMorning

4InTheMorning
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:05:49 AM

Posted 08 December 2007 - 07:10 PM

Thank you :thumbsup:

Karma




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users