andred_CT Posted August 3, 2005 Share Posted August 3, 2005 Hi Guys New to this forum. I have just finished loading up a new Laptop, Hardley used it. Have spybot and zonalarm loaded. Since activating zonealarm i have had hundreds of blocked accesses to 68.142.234.* *=35,40,77,35,76,, Also to p3w1.geo.re2.yahoo.com Any idea what this is, or which process is causing the problem. Software Loaded on the Box Macfee Windows XP Pro MS Office 2003 Visual Studio 6 Extra 3270 Terminal Emulator Service Centre Client Adobe 6.0 Media Player Cisco VPN Outlook IE6 Java 2 Run Time Regards Andre Link to comment Share on other sites More sharing options...
Wazoo Posted August 3, 2005 Share Posted August 3, 2005 I have just finished loading up a new Laptop, Hardley used it. Software Loaded on the Box Windows XP Pro No mention of a Service Pack ... cases have been documented of a new XP install being compromised within minutes of being placed on-line. Have spybot and zonalarm loaded. Nothing about what SpyBot sees ...??? There are other tools .... Since activating zonealarm i have had hundreds of blocked accesses to 68.142.234.* *=35,40,77,35,76,, Taking no liberties, the literal translation of your query is that your system is trying to contact the identified IP addresses. 68.142.234.40 for instance translates to the Inktomi block, identified as part of the 'slurp' web crawler ... generally implying that a 'slurp' bot is trying to access your system ... but that should have made your query read "blocked accesses 'from' ...." If you are correct in the "to" direction, there's not enough data provided. Also to p3w1.geo.re2.yahoo.com Any idea what this is, or which process is causing the problem. 31175[/snapback] What services are running? Which ones aren't supposed to be running? What steps have you taken to isolate anything / rule things out? Link to comment Share on other sites More sharing options...
Jeff G. Posted August 3, 2005 Share Posted August 3, 2005 There are other tools31178[/snapback] The ones I recommend are on Suggested Free Security Tools and Apps for Windows. Link to comment Share on other sites More sharing options...
andred_CT Posted August 3, 2005 Author Share Posted August 3, 2005 Ok some more info and a solution. The Message is outgoing, ie my machine is trying to contact those IPs. XP Service Pack 2. Always tries to connect in Pairs of attempts, TCP Port 445 and Net Bios Session It retries every 15 minutes. At some point I must have enabled Framework Services (McFee Virus Scanner) to have internet Access and the log stopped producing the errors. Checking Zone Labs logs, Program Alerts Network Associates: FrameworkServices.exe seems to be the user of this address. Strange that the addresses seemed to correlate with the Inktomi Block. Link to comment Share on other sites More sharing options...
Wazoo Posted August 3, 2005 Share Posted August 3, 2005 Ok some more info and a solution. Congrats! Both on working it through and finding the cause. The Message is outgoing, ie my machine is trying to contact those IPs. XP Service Pack 2. Always tries to connect in Pairs of attempts, TCP Port 445 and Net Bios Session It retries every 15 minutes. http://channels.lockergnome.com/it/archive...e_mystery.phtml http://www.garykessler.net/library/protect...me_systems.html http://its.ucsf.edu/information/software/w..._fw_advice2.jsp At some point I must have enabled Framework Services (McFee Virus Scanner) to have internet Access and the log stopped producing the errors. Checking Zone Labs logs, Program Alerts Network Associates: FrameworkServices.exe seems to be the user of this address. Not a fan of McAfee products, but this sounds like something that should be well documented in theur support forums. Strange that the addresses seemed to correlate with the Inktomi Block. 31187[/snapback] Hard to say ... They've yet to respond to any of my e-mails to discuss spam spew being sourced from these same IP blocks. For giggles, I did a HTTP get at the address chosen above and see the same 'p3w1.geo.re2.yahoo.com" you first referenced; 08/03/05 09:59:27 Browsing http://68.142.234.40 Fetching http://68.142.234.40/ ... GET / HTTP/1.1 Host: 68.142.234.40 Connection: close HTTP/1.1 400 Bad Request Date: Wed, 03 Aug 2005 14:59:29 GMT P3P: policyref="http://p3p.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE GOV" X-Host: p3w6.geo.re2.yahoo.com X-INKT-URI: http://us.geocities.com/server-errors/pd_bad_request.html X-INKT-SITE: http://us.geocities.com/server-errors Last-Modified: Wed, 27 Oct 2004 00:37:31 GMT no idea what a "network" connection might actually be trying to accomplish. It could be as easy as "checking for updates" .. but every 15 minutes seems a bit excessive for that ..??? Link to comment Share on other sites More sharing options...
shmengie Posted August 3, 2005 Share Posted August 3, 2005 I almost hate new computers because the come with so much "cheezy wares". My first guess is it's checking for updates or something of that nature or quite possibly your laptop mfg. is outsourcing updates/alerts w/yahoo or possibly a Multimedia application trying to grab ads and/or other content. Though zone alarm should inform you which program is trying to get to the outside world. Often when I work with a new computer I spend 95% of the first two hours uninstalling all the cheezy wares. Because there are hardware specific wares typically bundled with laptops, it's difficult to start out with a delete *everything* and re-install, though this is potentially quicker than the uninstall route, it's less advantagous because it takes time to locate all the "hardware specific" stuff, in the long run. I recommend running thru add/remove programs and remove all of which you're not going to use and most of which you'll probably will not use. The stuff you don't know what it is, can be little bit of a gamble. If it's something you actually do need, it shouldn't be very difficlut to get back on, but it's better to reomove the rubbish when you first get started, IMO. Worst case senario, you can start completely over from scratch with the rescue disk supplied. Personally, I wish they'd let you install the rubbish after you turn it on, but that's not the current trend most OEM computers. Link to comment Share on other sites More sharing options...
jimmyjell Posted November 15, 2018 Share Posted November 15, 2018 I want a new laptop. because my laptop's battery is not working. If you want that your device performs properly then you have to upgrade your battery when its need and its a big question that how we will know that when it has to replace? sometimes it pops up in your screen otherwise after some period of time replace it. If you have the issue related to laptop contact with <removed link to acer support> Link to comment Share on other sites More sharing options...
petzl Posted November 15, 2018 Share Posted November 15, 2018 11 hours ago, jimmyjell said: I want a new laptop. because my laptop's battery is not working. If you want that your device performs properly then you have to upgrade your battery when its need and its a big question that how we will know that when it has to replace? sometimes it pops up in your screen otherwise after some period of time replace it. If you have the issue related to laptop contact with <removed link to acer support> this have a "micro-USB" connection? The male micro connections often wear out replacements are cheap I buy mine on Ebay Link to comment Share on other sites More sharing options...
MIG Posted November 15, 2018 Share Posted November 15, 2018 On 8/3/2005 at 5:34 PM, Jeff G. said: The ones I recommend are on Suggested Free Security Tools and Apps for Windows. Re [Suggested Free Security Tools and Apps for Windows] [http://forum.spamcop.net/forums/index.php?showtopic=4514] redirects to "Sorry, there is a problem, The page you requested does not exist, Error code: 1S160/2" Link to comment Share on other sites More sharing options...
Lking Posted November 15, 2018 Share Posted November 15, 2018 16 hours ago, jimmyjell said: If you have the issue related to laptop contact with <removed link to acer support> Before you guys get to rapped around the axle, did you read the last line of the new post on this really old thread? Link to comment Share on other sites More sharing options...
RobiBue Posted November 16, 2018 Share Posted November 16, 2018 As a reminder: this jimmyjell has been posting things like this that in a strange way make sense, and then there is always a link, where I suppose you are sent to grab a virus or malware. He started posting this stuff about a week or two ago... Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.