[Wayfr]

Hello, I apologize if this has found the wrong forum. My problem is IE.exe. I observed through "Who's Connected" tool that IE establishes a connection on my network, for a matter of 10 sec, then disappears, only to come back and repeat the scenario, again and again, continuously.

Has anyone experienced this before and if so...any suggestions? Thank-you.

[Advertisements]

Disable the connection, or boot the PC with the router unplugged to see if you get any notification of a programme not being able to access the internet

[Retired Tech]

Disable the connection, or boot the PC with the router unplugged to see if you get any notification of a programme not being able to access the internet

[Wayfr]

Keith, thanks for looking at my problem. IE is making a network connection every 8- 10 sec even though the PC is idle and not being used by the user. I just put a software firewall on this PC...confirmed the users computer is launching traffic to a remote host...it looks like SYN pacs...maybe this is a Zombie M/C?

[Retired Tech]

I was hoping that with the connection disabled there would be a pop up saying whatever is trying to connect

Online Scans

Panda Scan

House Call

If Trend Micro freezes during updating, close then retry

Trend Micro Spyware Scan

Kaspersky Online Scan


Which software firewall did you install?

[Wayfr]

Keith, thanks for getting back to me. The PC doesn't seem to have much in the way of malware. I used TrendMicro and cleaned up a couple of tracking cookies and this...crackingapps_snadboy. I dropped in this firewall called"Agnitum". It's showing that IE is trying to connect to a remote address..."oshe.no-ip.org." When I release the block, IE makes just a quick connection then seconds later makes another connection. This I observe through the network tool " What's Connected". I don't know what is commanding the transmission. Any ideas?

[Retired Tech]

Is there anonymous browsing software on the PC

http://www.no-ip.com/

[Wayfr]

Yea Keith, I checked and all I saw was one...Hide IP program.There didn't seem to be any suspicious browsers. Is there any way to see what is using IE to connect to this network?

[Retired Tech]

Try checking IE history to see which pages it is visiting

[Wayfr]

There wasn't much to go on in the history. It was cleared this afternoon. Keith, usually, doesn't a program make an established connection for some time longer than just a few seconds? I keep observing IE making these short established ones and that's puzzling.

[Retired Tech]

You could put ZA Free on there, set to check everything, (programme control, high)

http://www.filehippo...zonealarm_free/

Disable the other one, after you install ZA

You can keep either

[Wayfr]

Say Keith, this IE thing has attempted over 1100 times to make a connection to that remote address. When I allow IE to connect, it continues to break after connecting and then re-establishing another connection, once again. It's connecting and then breaking at least 10 times a minute (if I don't block it)

[Retired Tech]

Post a Hijack This Log in the malware forum to see what they say

If you have ZA can you block it and tick remember this decision and have IE run properly

If it doesn't you can open ZA programme control and remove it to reset it

[Wayfr]

OK Keith, I'll post in the malware forum once I give this another kick. Thanks and maybe now you can get some ZZZ's.

[Retired Tech]

There must be something in the background

Hope it goes well