Activity on Port 16776

  • Thread starter Thread starter James Martin
  • Start date Start date
J

James Martin

Hello,

A couple days ago I noticed that there was constant activity on my network
card, even though I wasn't running anything that should be generating
network traffic. So I port scan and discovered that there's all kinds of
activity on port 16776.

Most of the packets are 104 bytes. And they are to a seemingly endless list
of IP's. Every second or two a new IP shows up from places all around the
world with some of this packet activity.

I've run every virus scanner and anti-spyware program I can find. None of
them detect anything. And yet the port activity is still going on
constantly.

Any suggestions?

Thanks in advance.

James
 
From: "James Martin" <[email protected]>

| Hello,

| A couple days ago I noticed that there was constant activity on my network
| card, even though I wasn't running anything that should be generating
| network traffic. So I port scan and discovered that there's all kinds of
| activity on port 16776.

| Most of the packets are 104 bytes. And they are to a seemingly endless list
| of IP's. Every second or two a new IP shows up from places all around the
| world with some of this packet activity.

| I've run every virus scanner and anti-spyware program I can find. None of
| them detect anything. And yet the port activity is still going on
| constantly.

| Any suggestions?

| Thanks in advance.

| James


Download and Execute TCPView from SysInternals
http://www.sysinternals.com/Utilities/TcpView.html

See if this will identify the fully qualified name and path of the file that is
communicating and this port.
 
James said:
Hello,

A couple days ago I noticed that there was constant activity on my network
card, even though I wasn't running anything that should be generating
network traffic. So I port scan and discovered that there's all kinds of
activity on port 16776.

Most of the packets are 104 bytes. And they are to a seemingly endless list
of IP's. Every second or two a new IP shows up from places all around the
world with some of this packet activity.

I've run every virus scanner and anti-spyware program I can find. None of
them detect anything. And yet the port activity is still going on
constantly.

Any suggestions?

Thanks in advance.

James
Click to expand...

Long

http://www.windowsecurity.com/artic...d_Rootkit_Tools_in_a_Windows_Environment.html

Short

http://tinyurl.com/klw1

Duane :)
 
Back
Top