Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Am I sending out spam?


  • Please log in to reply
11 replies to this topic

#1 Ken Meller

Ken Meller

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:12:34 AM

Posted 10 March 2009 - 09:33 AM

I would appreciate some advice, from anyone willing to give it, on what I think is suspicious behaviour on my machines.

In about the first week of February, I started to get some odd behaviour, the most obvious of which was that one or more of the internet-accessing (eg Firefox) apps would randomly stop communicating whilst others (eg IE) carried on. A reboot resets everything and all is ok for a while.

One machine runs Win2k, the other Vista both use ZoneAlarm and AVG and sit behind a Belkin ADSL router. I have tried scanning for malware with AVG, Sophos trial, SuperAntiSpyware, MalwareBytes Anti-Malware, Spybot, Kaspersky online, AdAware and a couple of rootkit detectors etc - all to no avail.

If I leave a machine unattended for a couple of hours I tend to engage ZoneAlarm's 'Stop all Internet activity' facility. Looking at the ZA logs on the Vista machine, I have found that every five days or so, there had been a great deal of blocking going on. Below is an extract of the log which shows just one minute's worth of activity. Over a period of an hour, the same destination addresses are repeatedly targeted every 1 to 3 minutes.

To me it looks as though my machine is being used to send out spam - but can an expert offer me their opinion (and recommendations)?


LOCK,2009/03/09,22:55:04 +0:00 GMT,Skype ,78.22.36.180,N/A
LOCK,2009/03/09,22:55:04 +0:00 GMT,Skype ,80.166.181.73,N/A
LOCK,2009/03/09,22:55:04 +0:00 GMT,Skype ,81.184.22.108,N/A
LOCK,2009/03/09,22:55:04 +0:00 GMT,Skype ,84.70.5.4,N/A
LOCK,2009/03/09,22:55:04 +0:00 GMT,Skype ,79.40.27.56,N/A
LOCK,2009/03/09,22:55:04 +0:00 GMT,Skype ,85.137.214.18,N/A
LOCK,2009/03/09,22:55:04 +0:00 GMT,Skype ,212.127.199.164,N/A
LOCK,2009/03/09,22:55:04 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:04 +0:00 GMT,Host Process for Windows Services,192.168.2.1,N/A
LOCK,2009/03/09,22:55:04 +0:00 GMT,Host Process for Windows Services,,N/A
LOCK,2009/03/09,22:55:04 +0:00 GMT,Skype ,92.50.77.91,N/A
LOCK,2009/03/09,22:55:04 +0:00 GMT,Skype ,86.133.232.49,N/A
LOCK,2009/03/09,22:55:04 +0:00 GMT,Skype ,151.47.138.68,N/A
LOCK,2009/03/09,22:55:06 +0:00 GMT,Skype ,95.134.85.101,N/A
LOCK,2009/03/09,22:55:06 +0:00 GMT,Skype ,78.20.123.34,N/A
LOCK,2009/03/09,22:55:06 +0:00 GMT,Skype ,81.84.148.2,N/A
LOCK,2009/03/09,22:55:06 +0:00 GMT,Skype ,79.78.77.227,N/A
LOCK,2009/03/09,22:55:06 +0:00 GMT,Skype ,87.15.226.88,N/A
LOCK,2009/03/09,22:55:06 +0:00 GMT,Skype ,83.132.58.195,N/A
LOCK,2009/03/09,22:55:06 +0:00 GMT,Skype ,213.39.214.112,N/A
LOCK,2009/03/09,22:55:06 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:06 +0:00 GMT,Skype ,88.161.29.235,N/A
LOCK,2009/03/09,22:55:06 +0:00 GMT,Skype ,84.193.212.125,N/A
LOCK,2009/03/09,22:55:06 +0:00 GMT,Skype ,151.60.88.63,N/A
LOCK,2009/03/09,22:55:08 +0:00 GMT,Skype ,87.198.58.112,N/A
LOCK,2009/03/09,22:55:08 +0:00 GMT,Skype ,81.111.131.128,N/A
LOCK,2009/03/09,22:55:08 +0:00 GMT,Skype ,86.9.118.211,N/A
LOCK,2009/03/09,22:55:08 +0:00 GMT,Skype ,87.11.29.161,N/A
LOCK,2009/03/09,22:55:08 +0:00 GMT,Skype ,84.56.73.72,N/A
LOCK,2009/03/09,22:55:08 +0:00 GMT,Skype ,82.32.162.129,N/A
LOCK,2009/03/09,22:55:08 +0:00 GMT,Skype ,83.89.12.235,N/A
LOCK,2009/03/09,22:55:08 +0:00 GMT,Skype ,85.181.119.147,N/A
LOCK,2009/03/09,22:55:08 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:08 +0:00 GMT,Host Process for Windows Services,,N/A
LOCK,2009/03/09,22:55:08 +0:00 GMT,Host Process for Windows Services,224.0.0.252,N/A
LOCK,2009/03/09,22:55:08 +0:00 GMT,Skype ,156.17.240.191,N/A
LOCK,2009/03/09,22:55:10 +0:00 GMT,Skype ,83.81.230.235,N/A
LOCK,2009/03/09,22:55:10 +0:00 GMT,Server driver,,N/A
LOCK,2009/03/09,22:55:10 +0:00 GMT,Skype ,80.225.99.205,N/A
LOCK,2009/03/09,22:55:10 +0:00 GMT,Skype ,87.122.89.156,N/A
LOCK,2009/03/09,22:55:10 +0:00 GMT,Skype ,84.197.43.67,N/A
LOCK,2009/03/09,22:55:10 +0:00 GMT,Skype ,149.156.74.233,N/A
LOCK,2009/03/09,22:55:10 +0:00 GMT,Skype ,193.204.68.219,N/A
LOCK,2009/03/09,22:55:10 +0:00 GMT,Skype ,80.162.28.200,N/A
LOCK,2009/03/09,22:55:10 +0:00 GMT,Skype ,79.45.217.80,N/A
LOCK,2009/03/09,22:55:10 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:10 +0:00 GMT,Skype ,92.4.10.96,N/A
LOCK,2009/03/09,22:55:10 +0:00 GMT,Skype ,213.47.3.3,N/A
LOCK,2009/03/09,22:55:12 +0:00 GMT,Skype ,82.237.8.223,N/A
LOCK,2009/03/09,22:55:12 +0:00 GMT,Host Process for Windows Services,,N/A
LOCK,2009/03/09,22:55:12 +0:00 GMT,Host Process for Windows Services,224.0.0.252,N/A
LOCK,2009/03/09,22:55:12 +0:00 GMT,Skype ,82.30.94.1,N/A
LOCK,2009/03/09,22:55:12 +0:00 GMT,Skype ,82.255.28.226,N/A
LOCK,2009/03/09,22:55:12 +0:00 GMT,Skype ,84.91.72.43,N/A
LOCK,2009/03/09,22:55:12 +0:00 GMT,Skype ,128.232.241.181,N/A
LOCK,2009/03/09,22:55:12 +0:00 GMT,Skype ,213.160.56.65,N/A
LOCK,2009/03/09,22:55:12 +0:00 GMT,Skype ,84.197.25.243,N/A
LOCK,2009/03/09,22:55:12 +0:00 GMT,Skype ,82.5.241.28,N/A
LOCK,2009/03/09,22:55:12 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:14 +0:00 GMT,Skype ,81.245.226.42,N/A
LOCK,2009/03/09,22:55:14 +0:00 GMT,Skype ,86.16.40.117,N/A
LOCK,2009/03/09,22:55:14 +0:00 GMT,Skype ,88.177.129.116,N/A
LOCK,2009/03/09,22:55:14 +0:00 GMT,Skype ,78.54.128.146,N/A
LOCK,2009/03/09,22:55:14 +0:00 GMT,Skype ,130.83.217.147,N/A
LOCK,2009/03/09,22:55:14 +0:00 GMT,Skype ,82.213.190.150,N/A
LOCK,2009/03/09,22:55:14 +0:00 GMT,Skype ,83.132.212.7,N/A
LOCK,2009/03/09,22:55:14 +0:00 GMT,Skype ,78.52.226.174,N/A
LOCK,2009/03/09,22:55:16 +0:00 GMT,Skype ,82.248.92.96,N/A
LOCK,2009/03/09,22:55:16 +0:00 GMT,Skype ,81.174.10.232,N/A
LOCK,2009/03/09,22:55:16 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:16 +0:00 GMT,Skype ,85.84.218.92,N/A
LOCK,2009/03/09,22:55:16 +0:00 GMT,Skype ,82.52.22.164,N/A
LOCK,2009/03/09,22:55:16 +0:00 GMT,Skype ,131.159.10.188,N/A
LOCK,2009/03/09,22:55:16 +0:00 GMT,Skype ,84.24.50.54,N/A
LOCK,2009/03/09,22:55:16 +0:00 GMT,Skype ,81.172.60.150,N/A
LOCK,2009/03/09,22:55:16 +0:00 GMT,Skype ,88.157.230.98,N/A
LOCK,2009/03/09,22:55:16 +0:00 GMT,Skype ,134.106.13.83,N/A
LOCK,2009/03/09,22:55:18 +0:00 GMT,Skype ,79.32.26.180,N/A
LOCK,2009/03/09,22:55:18 +0:00 GMT,Skype ,161.53.71.61,N/A
LOCK,2009/03/09,22:55:18 +0:00 GMT,Skype ,80.116.81.37,N/A
LOCK,2009/03/09,22:55:18 +0:00 GMT,Skype ,194.165.26.141,N/A
LOCK,2009/03/09,22:55:18 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:18 +0:00 GMT,Skype ,83.245.74.185,N/A
LOCK,2009/03/09,22:55:18 +0:00 GMT,Skype ,86.52.106.165,N/A
LOCK,2009/03/09,22:55:18 +0:00 GMT,Skype ,92.237.102.125,N/A
LOCK,2009/03/09,22:55:18 +0:00 GMT,Skype ,194.91.88.23,N/A
LOCK,2009/03/09,22:55:18 +0:00 GMT,Skype ,82.46.152.145,N/A
LOCK,2009/03/09,22:55:18 +0:00 GMT,Skype ,82.42.209.121,N/A
LOCK,2009/03/09,22:55:18 +0:00 GMT,Skype ,78.53.18.1,N/A
LOCK,2009/03/09,22:55:20 +0:00 GMT,Skype ,86.15.25.114,N/A
LOCK,2009/03/09,22:55:20 +0:00 GMT,Skype ,81.105.150.255,N/A
LOCK,2009/03/09,22:55:20 +0:00 GMT,Skype ,92.232.58.78,N/A
LOCK,2009/03/09,22:55:20 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:20 +0:00 GMT,Skype ,92.233.70.0,N/A
LOCK,2009/03/09,22:55:20 +0:00 GMT,Skype ,80.195.137.228,N/A
LOCK,2009/03/09,22:55:20 +0:00 GMT,Skype ,86.0.138.177,N/A
LOCK,2009/03/09,22:55:20 +0:00 GMT,Skype ,81.155.255.57,N/A
LOCK,2009/03/09,22:55:20 +0:00 GMT,Skype ,92.238.41.68,N/A
LOCK,2009/03/09,22:55:20 +0:00 GMT,Skype ,80.47.124.185,N/A
LOCK,2009/03/09,22:55:20 +0:00 GMT,Skype ,81.105.5.34,N/A
LOCK,2009/03/09,22:55:22 +0:00 GMT,Skype ,82.39.124.249,N/A
LOCK,2009/03/09,22:55:22 +0:00 GMT,Skype ,62.142.104.44,N/A
LOCK,2009/03/09,22:55:22 +0:00 GMT,Skype ,89.32.104.57,N/A
LOCK,2009/03/09,22:55:22 +0:00 GMT,Skype ,86.7.239.56,N/A
LOCK,2009/03/09,22:55:22 +0:00 GMT,Skype ,84.54.188.87,N/A
LOCK,2009/03/09,22:55:22 +0:00 GMT,Skype ,83.144.119.151,N/A
LOCK,2009/03/09,22:55:22 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:22 +0:00 GMT,Skype ,81.102.238.77,N/A
LOCK,2009/03/09,22:55:22 +0:00 GMT,Skype ,88.193.2.148,N/A
LOCK,2009/03/09,22:55:22 +0:00 GMT,Skype ,80.98.196.163,N/A
LOCK,2009/03/09,22:55:22 +0:00 GMT,Skype ,89.102.204.107,N/A
LOCK,2009/03/09,22:55:22 +0:00 GMT,Skype ,193.219.72.32,N/A
LOCK,2009/03/09,22:55:22 +0:00 GMT,Skype ,85.255.166.173,N/A
LOCK,2009/03/09,22:55:22 +0:00 GMT,Skype ,86.49.42.83,N/A
LOCK,2009/03/09,22:55:24 +0:00 GMT,Skype ,84.253.234.50,N/A
LOCK,2009/03/09,22:55:24 +0:00 GMT,Skype ,84.215.51.15,N/A
LOCK,2009/03/09,22:55:24 +0:00 GMT,Skype ,84.215.106.22,N/A
LOCK,2009/03/09,22:55:24 +0:00 GMT,Skype ,89.215.27.153,N/A
LOCK,2009/03/09,22:55:24 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:24 +0:00 GMT,Skype ,87.110.112.194,N/A
LOCK,2009/03/09,22:55:24 +0:00 GMT,Skype ,92.115.88.111,N/A
LOCK,2009/03/09,22:55:24 +0:00 GMT,Skype ,79.116.4.236,N/A
LOCK,2009/03/09,22:55:24 +0:00 GMT,Skype ,87.110.134.125,N/A
LOCK,2009/03/09,22:55:24 +0:00 GMT,Skype ,93.116.83.63,N/A
LOCK,2009/03/09,22:55:24 +0:00 GMT,Skype ,62.73.113.143,N/A
LOCK,2009/03/09,22:55:24 +0:00 GMT,Skype ,89.191.125.69,N/A
LOCK,2009/03/09,22:55:26 +0:00 GMT,Skype ,82.41.50.195,N/A
LOCK,2009/03/09,22:55:26 +0:00 GMT,Skype ,195.34.97.65,N/A
LOCK,2009/03/09,22:55:26 +0:00 GMT,Skype ,80.73.57.237,N/A
LOCK,2009/03/09,22:55:26 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:26 +0:00 GMT,Skype ,212.149.205.237,N/A
LOCK,2009/03/09,22:55:26 +0:00 GMT,Skype ,82.116.69.219,N/A
LOCK,2009/03/09,22:55:26 +0:00 GMT,Skype ,86.6.140.203,N/A
LOCK,2009/03/09,22:55:26 +0:00 GMT,Skype ,93.103.54.134,N/A
LOCK,2009/03/09,22:55:26 +0:00 GMT,Skype ,81.94.70.59,N/A
LOCK,2009/03/09,22:55:26 +0:00 GMT,Skype ,80.253.53.133,N/A
LOCK,2009/03/09,22:55:26 +0:00 GMT,Skype ,89.142.12.193,N/A
LOCK,2009/03/09,22:55:28 +0:00 GMT,Skype ,213.220.196.55,N/A
LOCK,2009/03/09,22:55:28 +0:00 GMT,Skype ,66.41.142.127,N/A
LOCK,2009/03/09,22:55:28 +0:00 GMT,Skype ,92.238.36.144,N/A
LOCK,2009/03/09,22:55:28 +0:00 GMT,Skype ,86.20.227.228,N/A
LOCK,2009/03/09,22:55:28 +0:00 GMT,Skype ,68.173.40.57,N/A
LOCK,2009/03/09,22:55:28 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:28 +0:00 GMT,Skype ,139.78.79.180,N/A
LOCK,2009/03/09,22:55:28 +0:00 GMT,Skype ,123.110.86.9,N/A
LOCK,2009/03/09,22:55:28 +0:00 GMT,Skype ,70.121.114.92,N/A
LOCK,2009/03/09,22:55:28 +0:00 GMT,Skype ,148.160.189.11,N/A
LOCK,2009/03/09,22:55:28 +0:00 GMT,Skype ,130.13.64.130,N/A
LOCK,2009/03/09,22:55:28 +0:00 GMT,Skype ,68.58.226.116,N/A
LOCK,2009/03/09,22:55:28 +0:00 GMT,Skype ,92.100.21.41,N/A
LOCK,2009/03/09,22:55:30 +0:00 GMT,Skype ,75.45.104.213,N/A
LOCK,2009/03/09,22:55:30 +0:00 GMT,Skype ,201.194.51.170,N/A
LOCK,2009/03/09,22:55:30 +0:00 GMT,Skype ,189.4.211.142,N/A
LOCK,2009/03/09,22:55:30 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:30 +0:00 GMT,Skype ,71.230.88.54,N/A
LOCK,2009/03/09,22:55:30 +0:00 GMT,Skype ,68.91.115.15,N/A
LOCK,2009/03/09,22:55:30 +0:00 GMT,Skype ,76.112.98.138,N/A
LOCK,2009/03/09,22:55:30 +0:00 GMT,Skype ,74.215.102.218,N/A
LOCK,2009/03/09,22:55:30 +0:00 GMT,Skype ,211.116.180.78,N/A
LOCK,2009/03/09,22:55:30 +0:00 GMT,Skype ,219.98.185.230,N/A
LOCK,2009/03/09,22:55:30 +0:00 GMT,Skype ,89.216.17.40,N/A
LOCK,2009/03/09,22:55:32 +0:00 GMT,Skype ,190.178.132.228,N/A
LOCK,2009/03/09,22:55:32 +0:00 GMT,Skype ,60.249.236.198,N/A
LOCK,2009/03/09,22:55:32 +0:00 GMT,Skype ,68.81.195.153,N/A
LOCK,2009/03/09,22:55:32 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:32 +0:00 GMT,Skype ,220.150.253.189,N/A
LOCK,2009/03/09,22:55:32 +0:00 GMT,Host Process for Windows Services,192.168.2.1,N/A
LOCK,2009/03/09,22:55:32 +0:00 GMT,Skype ,218.216.249.78,N/A
LOCK,2009/03/09,22:55:32 +0:00 GMT,Skype ,66.31.63.166,N/A
LOCK,2009/03/09,22:55:32 +0:00 GMT,Skype ,24.3.21.235,N/A
LOCK,2009/03/09,22:55:32 +0:00 GMT,Skype ,69.124.110.193,N/A
LOCK,2009/03/09,22:55:32 +0:00 GMT,Skype ,61.231.51.147,N/A
LOCK,2009/03/09,22:55:32 +0:00 GMT,Skype ,76.195.81.187,N/A
LOCK,2009/03/09,22:55:32 +0:00 GMT,Host Process for Windows Services,,N/A
LOCK,2009/03/09,22:55:44 +0:00 GMT,Server driver,,N/A
LOCK,2009/03/09,22:55:48 +0:00 GMT,Skype ,216.209.85.115,N/A
LOCK,2009/03/09,22:55:48 +0:00 GMT,Skype ,67.194.156.143,N/A
LOCK,2009/03/09,22:55:48 +0:00 GMT,Skype ,71.61.102.17,N/A
LOCK,2009/03/09,22:55:48 +0:00 GMT,Skype ,70.92.9.242,N/A
LOCK,2009/03/09,22:55:48 +0:00 GMT,Skype ,24.14.109.58,N/A
LOCK,2009/03/09,22:55:48 +0:00 GMT,Skype ,24.203.41.12,N/A
LOCK,2009/03/09,22:55:48 +0:00 GMT,Skype ,68.33.146.236,N/A
LOCK,2009/03/09,22:55:48 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:50 +0:00 GMT,Host Process for Windows Services,192.168.2.1,N/A
LOCK,2009/03/09,22:55:50 +0:00 GMT,Host Process for Windows Services,,N/A
LOCK,2009/03/09,22:55:50 +0:00 GMT,Skype ,69.47.238.72,N/A
LOCK,2009/03/09,22:55:50 +0:00 GMT,Skype ,190.160.64.26,N/A
LOCK,2009/03/09,22:55:50 +0:00 GMT,Skype ,220.136.209.178,N/A
LOCK,2009/03/09,22:55:50 +0:00 GMT,Skype ,24.184.31.65,N/A
LOCK,2009/03/09,22:55:50 +0:00 GMT,Skype ,61.231.156.86,N/A
LOCK,2009/03/09,22:55:50 +0:00 GMT,Skype ,190.161.66.254,N/A
LOCK,2009/03/09,22:55:50 +0:00 GMT,Skype ,61.127.98.57,N/A
LOCK,2009/03/09,22:55:52 +0:00 GMT,Skype ,201.160.143.251,N/A
LOCK,2009/03/09,22:55:52 +0:00 GMT,Skype ,221.243.182.102,N/A
LOCK,2009/03/09,22:55:52 +0:00 GMT,Skype ,75.138.42.13,N/A
LOCK,2009/03/09,22:55:52 +0:00 GMT,Skype ,76.237.185.54,N/A
LOCK,2009/03/09,22:55:52 +0:00 GMT,Skype ,69.255.187.67,N/A
LOCK,2009/03/09,22:55:52 +0:00 GMT,Skype ,70.119.114.73,N/A
LOCK,2009/03/09,22:55:52 +0:00 GMT,Skype ,74.193.142.89,N/A
LOCK,2009/03/09,22:55:52 +0:00 GMT,Host Process for Windows Services,192.168.2.1,N/A
LOCK,2009/03/09,22:55:52 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:52 +0:00 GMT,Host Process for Windows Services,,N/A
LOCK,2009/03/09,22:55:54 +0:00 GMT,Host Process for Windows Services,239.255.255.250,N/A
LOCK,2009/03/09,22:55:54 +0:00 GMT,Host Process for Windows Services,,N/A
LOCK,2009/03/09,22:55:54 +0:00 GMT,Skype ,24.12.56.223,N/A
LOCK,2009/03/09,22:55:54 +0:00 GMT,Skype ,99.142.8.108,N/A
LOCK,2009/03/09,22:55:54 +0:00 GMT,Skype ,217.132.175.215,N/A
LOCK,2009/03/09,22:55:54 +0:00 GMT,Skype ,58.32.190.41,N/A
LOCK,2009/03/09,22:55:54 +0:00 GMT,Skype ,219.98.18.171,N/A
LOCK,2009/03/09,22:55:54 +0:00 GMT,Skype ,189.43.254.149,N/A
LOCK,2009/03/09,22:55:54 +0:00 GMT,Skype ,98.26.164.223,N/A
LOCK,2009/03/09,22:55:54 +0:00 GMT,Skype ,127.0.0.1,N/A
LOCK,2009/03/09,22:55:56 +0:00 GMT,Skype ,130.39.150.156,N/A
LOCK,2009/03/09,22:55:56 +0:00 GMT,Skype ,219.181.28.95,N/A
LOCK,2009/03/09,22:55:56 +0:00 GMT,Skype ,123.110.146.16,N/A
LOCK,2009/03/09,22:55:56 +0:00 GMT,Skype ,66.254.238.130,N/A
LOCK,2009/03/09,22:55:56 +0:00 GMT,Skype ,76.197.237.111,N/A
LOCK,2009/03/09,22:55:56 +0:00 GMT,Skype ,24.62.225.157,N/A
LOCK,2009/03/09,22:55:56 +0:00 GMT,Skype ,24.67.112.119,N/A
LOCK,2009/03/09,22:55:56 +0:00 GMT,Host Process for Windows Services,,N/A
LOCK,2009/03/09,22:55:56 +0:00 GMT,Host Process for Windows Services,224.0.0.252,N/A
LOCK,2009/03/09,22:55:56 +0:00 GMT,Server driver,,N/A
LOCK,2009/03/09,22:55:58 +0:00 GMT,Skype ,98.209.216.123,N/A
LOCK,2009/03/09,22:55:58 +0:00 GMT,Skype ,24.215.123.40,N/A
LOCK,2009/03/09,22:55:58 +0:00 GMT,Skype ,157.182.111.160,N/A
LOCK,2009/03/09,22:55:58 +0:00 GMT,Skype ,82.80.154.13,N/A
LOCK,2009/03/09,22:55:58 +0:00 GMT,Skype ,89.156.182.22,N/A
LOCK,2009/03/09,22:55:58 +0:00 GMT,Skype ,213.202.39.41,N/A
LOCK,2009/03/09,22:55:58 +0:00 GMT,Skype ,89.176.207.8,N/A
LOCK,2009/03/09,22:55:58 +0:00 GMT,Skype ,127.0.0.1,N/A

Cheers,

Ken.

Edited by Ken Meller, 10 March 2009 - 09:34 AM.


BC AdBot (Login to Remove)

 


#2 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:07:34 PM

Posted 10 March 2009 - 09:43 AM

Do you have contacts in amsterdam or texas?

http://tools.whois.net/index.php?fuseactio...hoisbyipresults

http://www.geobytes.com/IpLocator.htm?GetLocation
Chewy

No. Try not. Do... or do not. There is no try.

#3 Ken Meller

Ken Meller
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:12:34 AM

Posted 10 March 2009 - 09:48 AM

No.

I haven't run this batch of addresses through whois, but I have others, there seems to be no pattern - many addresses are in the US but I've found others in Russia and Israel (no contacts there either).

Edit: I have just tried the first few addresses using http://www.ip-adress.com/whois (sic) and they are based in Belgium, Denmark, Spain, Germany and Italy - of those I have only one contact in Spain.

Are you thinking that Skype is trying to find out whether my contacts are online and is being frustrated by ZA?

Ken

Edited by Ken Meller, 10 March 2009 - 10:06 AM.


#4 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:07:34 PM

Posted 10 March 2009 - 10:14 AM

Well there's a skype bot but what I was wondering is how do you know these are outgoing requests?
Chewy

No. Try not. Do... or do not. There is no try.

#5 Ken Meller

Ken Meller
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:12:34 AM

Posted 10 March 2009 - 10:23 AM

Hi Chewy,

The log viewer in ZoneAlarm itself stated 'outgoing' although the logs dumped in Windows\Internet Logs don't show the direction.

Ken

#6 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:07:34 PM

Posted 10 March 2009 - 10:31 AM

Could skype be trying to update servers/dns in it's network?

Super nodes?
Chewy

No. Try not. Do... or do not. There is no try.

#7 Ken Meller

Ken Meller
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:12:34 AM

Posted 10 March 2009 - 03:35 PM

It could be something like that I guess but my Win2k machine doesn't show the same blockings.

#8 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:07:34 PM

Posted 10 March 2009 - 09:34 PM

I assume you are using a hardware NAT? Did you set it up for Skype? I saw mention of problems with computers that became supernodes from time to time?
Chewy

No. Try not. Do... or do not. There is no try.

#9 Ken Meller

Ken Meller
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:12:34 AM

Posted 11 March 2009 - 07:27 AM

I guess that it's a hardware NAT (I'm not quite sure of what one is except that I thought that was part of the job of the ADSL modem/router). I have not made any special provisions for Skype neither have I made any changes to the system just before this began (early last month).

ZoneAlarm seemed to pop up a bit more frequently than usual, sometimes saying that odd apps had changed since they were last run (it said Sessenv changed last week) - this is why I suspected that apps have been hijacked. It is interesting though that the problem with Skype has not changed after the update to version 4 earlier this week.

Ken

#10 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:07:34 PM

Posted 11 March 2009 - 09:51 PM

You might post over in the Web Browsing/Email and Other Internet Applications and find some skype users there?
Chewy

No. Try not. Do... or do not. There is no try.

#11 Ken Meller

Ken Meller
  • Topic Starter

  • Members
  • 25 posts
  • OFFLINE
  •  
  • Local time:12:34 AM

Posted 12 March 2009 - 03:00 PM

Thanks for your thoughts - I am inclined to think that the issue is not so much to do with Skype itself but something piggybacking itself onto Skype to use it for its own purposes. However I will give that a whirl.

I am awaiting a reply from Skype to see if they recognize the addresses used but I'm not holding my breath.

Ken

#12 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:07:34 PM

Posted 12 March 2009 - 03:58 PM

Skype and other applications for video streaming basically make your computer into P2P zombie

3.3 Utilization of Your Computer:Skype Software may utilize the processor and bandwidth of the computer (or other applicable device) You are utilizing, for the limited purpose of facilitating the communication between You and third parties. Skype will use its commercially reasonable efforts to protect the privacy and integrity of the computer resources (or other applicable device) You are utilizing and of Your communication, however Skype cannot give any warranties in this respect.


Chewy

No. Try not. Do... or do not. There is no try.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users