Computer trying to connect to 194.145.128.33 by itself

DaithiSurfer · 05-06-2003 10:52am #1

My computer trying to connect to 194.145.128.33 by itself.
i have looked this ip up and it is ESAT.
I have nothing from Esat installed.
My service provider is netsource.
Are esat installing spyware now?
Can anyone tell me how to find the offending program?
I have Zonealarm, but it doesn't identify the specific program.

Kali · 05-06-2003 11:06am

Perhaps netsource are owned by esat? maybe they use esats dns servers?

In any case try 'netstat -an' to give you a clue as to what local port or what destination port you're connecting to.

DaithiSurfer · 05-06-2003 11:19am

Still tho, surely it shouldn't be trying to auto connect .

Frank Grimes · 05-06-2003 11:51am

What's trying to connect to that address exactly?
That IP address resolves to chipstick.iolfree.ie, when you put that into a browser it redirects to www.iol.ie

DaithiSurfer · 05-06-2003 12:04pm

I don't know whats trying to connect.
At start up i get a message telling me that a program is trying to connect to that address.
Doesn't tell me what program tho.

Frank Grimes · 05-06-2003 12:07pm

Did you check the logs? Might give some sort of indication.

Kali · 05-06-2003 2:34pm

Oops I didn't realise it was happening at startup.. thought you meant while you were connected with netsource...

You don't say what OS you're using, but check what applications are starting via the registry:
off the top of my head its in a key called RunOnce or likewise in hkey_local_machine/software/windows .. that and check event viewer if you're running NT/2000/XP.

ando · 05-06-2003 3:55pm

try downloading a trial of 'Spybot'. It will search your HD for any spyware programs, although I think its just a clitch in some program. Did you ever had esat/Iol as an ISP?

eth0_ · 06-06-2003 9:38am

Do you have an iolfree email account...chipstick is a mail server.

DaithiSurfer · 06-06-2003 9:54am

I have nothing from ESat or IOL at all.
After the No Limits carry on a few years ago i refuse to have anything to do with them.
I do visit tthe iol web site from time to time tho.

eth0_ · 06-06-2003 10:04am

What programs do you keep running at all times?
Is chipstick IP showing in a netstat all the time?
Possibly you have a worm virus that's trying to send out email.

vibe666 · 06-06-2003 10:06am

if chipstick is a mail server, it's possible that you have a virus thats trying to spread itself about.

only reason i could think of for that to happen though would be if you have an email app on the PC that has an old iol email a/c set up in it.

did you used to have an iol email a/c on the PC anywhere?

even if you don't use it, if it's on the PC and you've picked up a virus, it might have detected the settings when it worked its way through your addressbook and tried to contac tthe server to do its dirty little deed.

I might be wrong, but it's certainly something to consider.

if you have a firewall then I'm guessing you have some AV software too, so you might want to do a virus defs update and do a full and I mean really FULL system scan to see if you can dig anything up.

but like I said, I might be wrong.

you did come here for iseas though didn't you

Computer trying to connect to 194.145.128.33 by itself

Comments