Forum Home
Press F1
 
Thread ID: 36427 2003-08-10 03:44:00 Dodgy internet access from my computer? Umila (4107) Press F1
Post ID Timestamp Content User
166495 2003-08-10 03:44:00 Hi All. I wonder if anyone can assist with this -
I sometimes receive the following message from firewall to access the internet, even when I'm not on the internet, for access to the internet -
Does anyone know what it means or is it a legit request..., where's it from, how can I find out, - more info on firewall is not much help.

Dest: IP: 203.66.2.53, Application: PNT 10MON.exe, Version: 7.6.1.0.1402

I have in the past granted permission, being a bit naive when I first installed firewall
As I say, I have my suspicions due to the fact that I am not on internet when it sometimes wants to access. Am I being suspicious for no good reason. I have spyware and adware installed as well.
Any assistance appreciated.
Umila (4107)
166496 2003-08-10 04:33:00 I cannot find much information on that application, but the IP address of 203.66.2.53 comes to a grinding halt at this location: Chungwha Telecom Co. (www.cht.com.tw)

Is your Ad-aware 6 and Spybot are up to date with definitions? Do you use any antiviral software?
Jen C (20)
166497 2003-08-10 04:43:00 That's interesting, you found a foreign telecom link. If its not too much bother, how did you locate that address?

Yes my Ad-ware and spybot are up to date and I do use pc-cillin 2000 anti- virus only software.
I'm just in the process of updating firewall but I'm a bit stuck, because with Ad-ware and Spybot, they are automatically updated when you go into their whatever, but with Zonelab firewall, I've had to download a new version, and I think I have to uninstall, but not sure.
Thanks again.
Umila (4107)
166498 2003-08-10 04:45:00 The first thing that occurs to me is a long thread we had a while back about a multimedia keyboard that sent out a signal to what turned out to be a completely random site, just in order to check that the internet connection was working.

Try scanning the list of PressF1 posts for Netropa.

In the Netropa case, the unintending "villain", Hewlett-Packard had to issue a fix to remove the probe - though they insisted it was doing nothing suspect.

Argus
argus (366)
166499 2003-08-10 05:01:00 >how did you locate that address?

You can enter an IP address at this site: Sam Spade (http://www.samspade.org/) and get further information on that address. It does have its limits however.
Jen C (20)
166500 2003-08-10 05:05:00 To find ISP address. www.amnesia.com
Bye
Peter H (220)
166501 2003-08-10 05:08:00 Whoops - just checked that link, and it's not working. See what I can find.
Bye
Peter H (220)
166502 2003-08-10 05:12:00 My Spelling. eamnesia.com
Bye
Peter H (220)
166503 2003-08-10 05:53:00 PC-cillin has a file named iomon.exe - perhaps that's what you saw? wuppo (41)
166504 2003-08-10 08:42:00 Hi Wuppo
Yes I think you are on to it. I checked the pc program and the version number matches exactly. I'll just double check with pc support.
Thanks for that.
Umila (4107)
1 2