Curse

Kinetic Trilogy · Apr 12, 2009, 04:31 PM // 16:31

I've noticed this for a while now but never really asked - but now it's got to a point where I HAVE to know what the hell this is. Sometimes, I like to check what my computer is connected to via the internet. I use dial up, and I use a custom way to dial in (I set up my own connection, not the ISP's software.) Whenever I use Netstat or any variation of it in the command prompt, I get alot of connections, most of them are MY IP. As usual, it shows what I'm connected to, whether it be a webpage, MSN or any other program I have open but it ALWAYS shows me connected to my own ip or a local ip (127.0.0.1) ranging from 5 to 10 connections and showing up as ESTABLISHED. I'm just confused as to what the hell this means - does anyone know?

Edit: Might as well ask this also. For the past few days, I've been encountering a malware problem. I use Avast and Ad-Aware, both free versions. Avast has detected a couple times a "DCOM-F" exploit trying to do something (I don't exactly read the warning - I just delete it) I've scanned my computer both with Avast and Ad-Aware in safe mode and it finds nothing. It also finds a little program in my system32 folder, and it sometimes have a different syntax; asr_*.exe, the * being a variation of numbers like 14325 and such. Does anyone know or heard anything about that? Google hasn't helped me much. (I've read up on the DCOM-F exploit, just wondering if this asr has something to do with it because the DCOM document said nothing about it)

Fril Estelin · Apr 12, 2009, 04:53 PM // 16:53

problem 1: it's perfectly normal, many networking programs implement a "local loop" by trying to communicate with the PC where they're running via the "localhost" IP address (127.0.0.1). So you're probably seeing standard libraries which are available to many other software "locally" (but communicating via a network address).

problem 2: first make sure that your Windows is completely uptodate. If it is, try the malwarebyte package set up by Tarun from this forum. Run checks and see if the tools can fix the vulnerability. If not, download a trial version of an antivirus such as NOD32 or Kaspersky, then disconnect your PC from the net, install them and make a full verification of your disks.