port 6667

[suleyman]

i posted wrong error message, this is the correct error
message

[07/24/2003 13:52:18.82] Block host "" internet access -
Source=192.168.16.250 - Destination=209.126.206.48:6667 -
TCP, Group Everyone


Above message was given by my firewall logs(Symantec

 

[JasonW]

You could use something like Sysinternals free TCPView to show what
processes are running and what address and ports they are trying to
communicate with. This should help reveal what the process is so you can
kill it, or track down what is spawning the process. There is another free
program on the same site called Process Explorer that shows what DLLs are
associated with a particular process.
http://www.sysinternals.com/ntw2k/source/tcpview.shtml
http://www.sysinternals.com/ntw2k/utilities.shtml

-JasonW

i posted wrong error message, this is the correct error
message

[07/24/2003 13:52:18.82] Block host "" internet access -
Source=192.168.16.250 - Destination=209.126.206.48:6667 -
TCP, Group Everyone


Above message was given by my firewall logs(Symantec

Appliance 200R) at every 20 seconds. I tried to solve this
problem by some anti trojan programs. But still lots of
messages are given this firewall. I cannot solve this
problem, please help me....

 

[Miha Pihler]

What is your question?

The thing that you see is:
someone from your internal network with IP 192.168.15.250 was trying to go
to IRC server with IP 209.126.206.48 (psa.nitrousnet.net)... on port 6667
....

--
Mike
MCSA 2K, MCSE 2K, MCT, ...

i posted wrong error message, this is the correct error
message

[07/24/2003 13:52:18.82] Block host "" internet access -
Source=192.168.16.250 - Destination=209.126.206.48:6667 -
TCP, Group Everyone


Above message was given by my firewall logs(Symantec

Appliance 200R) at every 20 seconds. I tried to solve this
problem by some anti trojan programs. But still lots of
messages are given this firewall. I cannot solve this
problem, please help me....