Port 80 outbound request to server I don't know

[JohnJohn]

I noticed in my router log file my pc's are tring to go to servers on the web that I'm not going to from my browser. The addresses I'm finding are on the blackhole list. I have Nortons up to date and it is not finding anything. I did have Nimda in the past. What are these servers? What virus does this?

Thanks

 

[Grenage]

Do you have any "spyware" on your local machines that might be sending out anything ?

When we had programs sending things out we tried zonealarm on the local machines, since it's free and effective.

 

[JohnJohn]

No spy ware that I know of. I have sniffer traces of the activity looks like it is coming from IE, when I start a browser it starts to go to these sites. If I check the site it does not have a web page that can be viewed. After 10 minutes or so I see external machines trying to come in on high ports.

 

[Grenage]

Many other requests are sent over connections, such as DNS requests and whatnot. As long as you have Norton up to date your covered for Virii, and a firewall will protect you from being hacked.

 

[Kento]

Get and run Moosoft's Cleaner which is free to try. It's a trojan specific scanner that can find trojans that av programs will miss.

http://www.moosoft.com

Then get and run Ad-aware (free) to scan for spyware:

http://www.lsfileserv.com/index.html