Accessing strange host

When I run netstat -ap tcp I find my machine connected to one strange host
unnecessarily. How can I stop this, and moreover I am curious to know how is
it happening...

The hots is -
202-9-62-188.cdsl.digisurf.com.au:4947

What should I do, I don't have a firewall, and I am connected to internet
using a dial-up connection.

Thanks,
- Manish

Jurren
Tue Apr 20 04:21:18 CDT 2004

"Manish" <dontspam_manish@yahoo.DeleteThis.com> wrote in message
news:Onn651pJEHA.1944@TK2MSFTNGP10.phx.gbl...
> When I run netstat -ap tcp I find my machine connected to one strange host
> unnecessarily. How can I stop this, and moreover I am curious to know how
is
> it happening...
>
> The hots is -
> 202-9-62-188.cdsl.digisurf.com.au:4947
>
> What should I do, I don't have a firewall, and I am connected to internet
> using a dial-up connection.
>
> Thanks,
> - Manish
>
>

Why don't you get a firewall? If you have XP installed at least turn XPs
firewall on:
"HOW TO: Enable or Disable Internet Connection Firewall in Windows XP"
http://support.microsoft.com/default.aspx?scid=kb;en-us;283673

Or get a nice free one at ZoneAlarm:
http://www.zonelabs.com/store/content/home.jsp

Download Ad-aware to get rid of any spyware on your computer:
http://www.lavasoftusa.com/support/download/

Run an online virus scan:
http://www.ravantivirus.com/scan/

--
Jurren Bouman
MVP Windows® - Security
http://www.microsoft.com/security/

*Vanguard*
Tue Apr 20 04:34:14 CDT 2004

"Manish" said in news:Onn651pJEHA.1944@TK2MSFTNGP10.phx.gbl:
> When I run netstat -ap tcp I find my machine connected to one strange
> host unnecessarily. How can I stop this, and moreover I am curious to
> know how is it happening...
>
> The hots is -
> 202-9-62-188.cdsl.digisurf.com.au:4947
>
> What should I do, I don't have a firewall, and I am connected to
> internet using a dial-up connection.
>
> Thanks,
> - Manish

So when was the last time you ran (and why didn't this time prompt you)
a full virus scan using a recently updated anti-virus product and also
check for spyware? AVG is free plus McAfee and Symantec have online
scanners (probably requiring you to download an ActiveX component) and
use Ad-Aware and Spybot to check for spyware. A irewall will tell you
what application is trying to make the connection. ZoneAlarm and Kerio
have freebie versions.

--
____________________________________________________________
*** Post replies to newsgroup. Share with others.
*** Email: domain = ".com" and append "=news=" to Subject.
____________________________________________________________

Manish
Wed Apr 21 03:03:39 CDT 2004

Thanks for the info!!!
I wasn't aware that firwall would be free, will get one soon (slow internet
connection, so big download is a big issue here)

- Manish


"Jurren Bouman" <jubo@euronet.nl> wrote in message
news:O1PfXjrJEHA.228@TK2MSFTNGP10.phx.gbl...
> "Manish" <dontspam_manish@yahoo.DeleteThis.com> wrote in message
> news:Onn651pJEHA.1944@TK2MSFTNGP10.phx.gbl...
> > When I run netstat -ap tcp I find my machine connected to one strange
host
> > unnecessarily. How can I stop this, and moreover I am curious to know
how
> is
> > it happening...
> >
> > The hots is -
> > 202-9-62-188.cdsl.digisurf.com.au:4947
> >
> > What should I do, I don't have a firewall, and I am connected to
internet
> > using a dial-up connection.
> >
> > Thanks,
> > - Manish
> >
> >
>
> Why don't you get a firewall? If you have XP installed at least turn XPs
> firewall on:
> "HOW TO: Enable or Disable Internet Connection Firewall in Windows XP"
> http://support.microsoft.com/default.aspx?scid=kb;en-us;283673
>
> Or get a nice free one at ZoneAlarm:
> http://www.zonelabs.com/store/content/home.jsp
>
> Download Ad-aware to get rid of any spyware on your computer:
> http://www.lavasoftusa.com/support/download/
>
> Run an online virus scan:
> http://www.ravantivirus.com/scan/
>
> --
> Jurren Bouman
> MVP Windows® - Security
> http://www.microsoft.com/security/
>
>

N
Wed Apr 21 18:55:46 CDT 2004

In article <Onn651pJEHA.1944@TK2MSFTNGP10.phx.gbl>,
dontspam_manish@yahoo.DeleteThis.com says...

> When I run netstat -ap tcp I find my machine connected to one strange host
> unnecessarily. How can I stop this, and moreover I am curious to know how is
> it happening...

> The hots is -
> 202-9-62-188.cdsl.digisurf.com.au:4947

> What should I do, I don't have a firewall, and I am connected to internet
> using a dial-up connection.

Hmmm. Using Sam Spade, I discovered the following. Going +1 and -1 to the
last quad of the IP address of your connection, and finding:

04/21/04 16:46:21 dns 202.9.62.189
nslookup 202.9.62.189
Canonical name: 202-9-62-189.cdsl.digisurf.com.au
Addresses:
202.9.62.189

and...

04/21/04 16:46:14 dns 202.9.62.187
nslookup 202.9.62.187
Canonical name: 202-9-62-187.cdsl.digisurf.com.au
Addresses:
202.9.62.187

So it looks like an Australian ISP customer with a DSL line is connecting to
your computer. Not good. It may be best, at this point, to back up and start
over. Format the disk, reinstall the operating system. First thing to do
*before* connecting to the Internet is to get the firewall running. As
Jurren Bouman mentioned, Windows XP has a built in firewall, and this should
be sufficient to keep worms, and such, off of your computer. Get all the
Windows patches for your system. Then learn how to configure your browser
for safe surfing.

ZAF goes one step farther than the WinXP firewall by controlling
applications which want to call out. This is a good thing to add, but during
the re-build, keeping stuff off of the computer is most important.

--
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint