Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

HELP - Kaspersky shows over 30 connections for my one open browser!!!


  • Please log in to reply
16 replies to this topic

#1 wannawonda

wannawonda

  • Members
  • 105 posts
  • OFFLINE
  •  
  • Local time:03:46 PM

Posted 18 March 2015 - 07:17 PM

We have Kaspersky Total Security.  Our computer, especially the internet, has been extremely slow.  While doing various task on Kaspersky, I happend upon the Network activity tab.  There showed ove 30 connections all to different External IP addresses, I had one connection open.......No idea if this is normal.

 

 



BC AdBot (Login to Remove)

 


m

#2 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:12:46 AM

Posted 19 March 2015 - 01:22 AM

Hello there,

Can you show us which IP addresses are being connected to? (logs if possible)

#3 wannawonda

wannawonda
  • Topic Starter

  • Members
  • 105 posts
  • OFFLINE
  •  
  • Local time:03:46 PM

Posted 19 March 2015 - 09:49 AM

I took a screen shot.  Would that help?



#4 wannawonda

wannawonda
  • Topic Starter

  • Members
  • 105 posts
  • OFFLINE
  •  
  • Local time:03:46 PM

Posted 19 March 2015 - 09:59 AM

Sorry, I am unable to post a screen shot and can not find the attach button.  Can I send it to you?



#5 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Quebec, Canada
  • Local time:06:46 PM

Posted 19 March 2015 - 10:07 AM

There's no option to attach a file in this section. You can upload the screenshot for free on imgur.com and post the image link here after.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#6 wannawonda

wannawonda
  • Topic Starter

  • Members
  • 105 posts
  • OFFLINE
  •  
  • Local time:03:46 PM

Posted 19 March 2015 - 10:24 AM

Don't feel comfortable posting a screen shot with ip's on that site, sorry.



#7 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:12:46 AM

Posted 19 March 2015 - 10:28 AM

You can upload it to some other site like Photobucket and directly paste the link with IMG tag into here, or use Paint to black out the IP addresses.

Edit: Post got cut off.

Edited by Alexstrasza, 19 March 2015 - 10:29 AM.


#8 wannawonda

wannawonda
  • Topic Starter

  • Members
  • 105 posts
  • OFFLINE
  •  
  • Local time:03:46 PM

Posted 19 March 2015 - 10:50 AM

try this  http://s1341.photobucket.com/user/935ac1ad/media/Untitled_zpsoarzdy2i.png.html?filters[user]=142801638&filters[recent]=1&sort=1&o=0  



#9 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Quebec, Canada
  • Local time:06:46 PM

Posted 19 March 2015 - 10:52 AM

You have a lot of connections because most of them are duplicates, and it's not suspicious at all, just look at the IP addresses. How many tabs do you have open in Firefox, how many plugins, how many extensions?

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#10 wannawonda

wannawonda
  • Topic Starter

  • Members
  • 105 posts
  • OFFLINE
  •  
  • Local time:03:46 PM

Posted 19 March 2015 - 10:58 AM

there was only one tab open



#11 wannawonda

wannawonda
  • Topic Starter

  • Members
  • 105 posts
  • OFFLINE
  •  
  • Local time:03:46 PM

Posted 19 March 2015 - 10:59 AM

five plugins and six extensions



#12 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Quebec, Canada
  • Local time:06:46 PM

Posted 19 March 2015 - 11:35 AM

Each of these plugins and extensions could create a connection to an IP address they are related to: service, update, etc. Same as every content on your opened webpage that isn't hosted on the site, like ads.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#13 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,620 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:46 AM

Posted 22 March 2015 - 02:33 PM

Don't worry, this can be perfectly normal.

 

It's not because you visit just one site, that you have just one connection. A site can reference other sites (for pictures, videos, javascript, ...).

Plus many sites integrate with Facebook, Twitter, Reddit, ...

And advertisements sites, Google statistics, ...

 

All these elements can cause extra connections.

Nothing to worry about.


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#14 wannawonda

wannawonda
  • Topic Starter

  • Members
  • 105 posts
  • OFFLINE
  •  
  • Local time:03:46 PM

Posted 22 March 2015 - 05:29 PM

Thank you.  Just happened upon that at the same time period our internet and computer have been running extremely slow.  Perhaps something else is going on.


Edited by wannawonda, 22 March 2015 - 05:30 PM.


#15 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Quebec, Canada
  • Local time:06:46 PM

Posted 22 March 2015 - 06:02 PM

If you think that your system is infected, nothing prevents you from asking a check-up here :) In order to do that, you have to post a thread in the Virus, Trojan, Spyware, and Malware Removal Logs section. You have to follow the instructions in the preparation guide prior to posting your thread, since it contains the steps to follow when posting it.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users