Unknown outgoing access

Avast Free Antivirus / Premium Security
1

Hi,

I am WinXP users with SP2. When my laptop connected to internet, the firewall (ZoneAlart) warns unknown outgoing access shown in attachment. I thought some virus screwed up my pc so scan with avast. But nothing detedted. Other spyware scan did not detect anything either. Is this virus or something else? How can I stop this?

Please advise.

mmiya

2
  1. i would update win xp to sp3!!!
  2. ur fw blocks it, isn’t that what u want?
  3. look:

Using server whois.arin.net.
Query string: “192.168.1.117”

OrgName: Internet Assigned Numbers Authority
OrgID: IANA
Address: 4676 Admiralty Way, Suite 330
City: Marina del Rey
StateProv: CA
PostalCode: 90292-6695
Country: US

NetRange: 192.168.0.0 - 192.168.255.255
CIDR: 192.168.0.0/16
NetName: PRIVATE-ADDRESS-CBLK-RFC1918-IANA-RESERVED
NetHandle: NET-192-168-0-0-1
Parent: NET-192-0-0-0-0
NetType: IANA Special Use
NameServer: BLACKHOLE-1.IANA.ORG
NameServer: BLACKHOLE-2.IANA.ORG
Comment: This block is used as private address space.
Comment: Addresses from this block can be used by
Comment: anyone without any need to coordinate with
Comment: IANA or an Internet registry. Addresses from
Comment: this block are used in multiple, separately
Comment: operated networks.
Comment: This block was assigned by the IETF in the
Comment: Best Current Practice document, RFC 1918
Comment: which can be found at:
Comment: http://www.rfc-editor.org/rfc/rfc1918.txt
RegDate: 1994-03-15
Updated: 2010-03-15

OrgAbuseHandle: IANA-IP-ARIN
OrgAbuseName: Internet Corporation for Assigned Names and Number
OrgAbusePhone: +1-310-301-5820
OrgAbuseEmail: abuse@iana.org

OrgTechHandle: IANA-IP-ARIN
OrgTechName: Internet Corporation for Assigned Names and Number
OrgTechPhone: +1-310-301-5820
OrgTechEmail: abuse@iana.org

ARIN WHOIS database, last updated 2010-03-21 20:00

Enter ? for additional hints on searching ARIN’s WHOIS database.

ARIN WHOIS data and services are subject to the Terms of Use

available at https://www.arin.net/whois_tou.html

3

@ the OP: that’s should be another computer on your LAN. If not, then try to investigate, could also be a neighbor’s computer but considering your post and question here I doubt you’d try to hack into your neighbor’s system :wink:

4

you can also disable netbios if not needed.

5

Thanks very much for your advices.

Ok, so my computer tries to do something… actually my laptop is not connected to LAN but 3G (vodafone) network.
Apart from my posting, it also try to send a packet to 10.11.12.13 (internal) and 202.170.36.72 (APNIC). I am just wondering what my laptop is trying by doing this?

I didn’t see this pop up warning before (it’s been a couple of week since zonealarm pops up the warning) and I am not particularly using netbios. Any idea?

mmiya