econnections
IS-IT--Management
Hi,
I have McAfee installed on my w2000 and the logs show services.exe has been for months trying to connect to
192.175.48.1 port 53 (prisoner.iana.org, Redwood City, CA) and 87.106.71.163 port 53 (e.dnsvr.co.uk located in Germany). It tries to connect to the first IP address three times and fails because the firewall blocks it then tries to connect to the second IP address. The process keeps repeating itself.
Is there any way I can find out which application or file is requesting services.exe to make these connection attempts? My anti-virus software has not discovered anything but connections to these addresses may be a threat. It is possible a Trojan is trying to sent data over port 53; using the port for some purpose other than dns. Any help would be appreciated.
I have McAfee installed on my w2000 and the logs show services.exe has been for months trying to connect to
192.175.48.1 port 53 (prisoner.iana.org, Redwood City, CA) and 87.106.71.163 port 53 (e.dnsvr.co.uk located in Germany). It tries to connect to the first IP address three times and fails because the firewall blocks it then tries to connect to the second IP address. The process keeps repeating itself.
Is there any way I can find out which application or file is requesting services.exe to make these connection attempts? My anti-virus software has not discovered anything but connections to these addresses may be a threat. It is possible a Trojan is trying to sent data over port 53; using the port for some purpose other than dns. Any help would be appreciated.
