Firewall says i am accessing at remote address when not connected?

[Electron]

Hi everyone,

I have Norton Internet Security 2002 installed with Windows XP. I keep getting the alert box come up telling me that either i or a program is trying to access the internet, but most times i am not even connected, can anyone tell me why.

Also the remote address is just a string of numbers, so i don't know where it is trying to connect to, is there a way of finding out. I have tried putting the numbers in the address bar, but it just comes up that the page cannot be displayed.

Thanks for any help.

[ZANEY123]

Have you scanned for virus's,trojans,,

Zaney123

[Electron]

Yes i have. with Ad-Aware. This is a clean install, only WinXP, plus drivers and software for certain hardware.

[ZANEY123]

well i use ZA for my firewall so i am stuck sorry, i am not familier with NS..

[LordofEchoSide]

do you remeber what programs are trying to access the internet?

[Electron]

It doesn't say what programs are accessing the internet on these two occasions, some others do (such as the update facility) the message just says:-

You (or a program) are trying to access the internet at remote address 239.255.255.250 then the local address as a string of numbers, then asks if i want to permit the access or deny it.

What i don't understand is why it asks for permission when i am not using the internet or when i have disconnected. Also, whether i can find out somehow what the remote address is from the string of numbers.

Thanks.

[glc]

Ad-Aware doesn't scan for Trojans. You need something like The Cleaner for that.

[doubledragon5]

Open up Nortons choose Personal firewall>then INternet Access control> then choose configure you have to configure everything in the box so Nortons won't keep bugging you about a program trying to access the Internet. Just right click on any Item in the window and choos permit all and that should stop Nortons from popping up on ya.

Everytime you install something new Nortons will pop-up, make sure the first dot in the box is marked and then put a check in the box in the lower left hand of the window that pops-up. I go through this all the time with NOrtons.

[Electron]

Thanks for the replies. I like to know what is accessing the internet, so i configure the pop-ups as they appear. But i don't understand why they appear if i am not connected to the internet.

Thanks glc, i have used that program before but couldn't remember what it was called.

[sdkfz]

Some programs (both wanted and unwanted) can access the internet for you/themselves, all they have to do is look at the dial up properties and execute them for them selves. think Norton auto update of virus definitions as a 'wanted' app and a trojan/worm as an unwanted app.

Try turning off all the programs approvals and then approve them as they come up, when you do not know the program in question trying to access look at processes under CTRL ALT DEL.

I am in the middle of trying to find out what is accessing the internet myself. Norton firewall has a turn off all connections feature that I am using while I try to see what aI missed on set up or have as an trojan, Adaware comes up empty as does AV.

Am going to load the the cleaner myself, thanks glc, we will see what it finds when I get home. Norton AV claims the 2003 version automatically removes viruses, worms, and Trojan horses, so the cleaner should come up empty, we shall see

http://www.pcworld.com/downloads/fil...id,8183,00.asp

or

http://www.moosoft.com/

[SARGE]

Depending on your situation at home, there could be a "pc monitoring" program running that sends the info to a remote location. It usually accesses an e-mail program though, to send the info. They, by design, are a devil to detect. I know.

[sdkfz]

Update- downloaded and ran The Cleaner, as I expected nothing was found, it was then that the wife came by and saw the address reported as trying to access the web and it started with a ten, she said this was not a possible internet address and it was a spoof (ie faked addy), so it appears that I am just getting lots of hits by hackers.

Sometime the Norton firewall is able to track the address back to the source, so far one in columbia and another in romania were the starting points of some pretty convoluted paths.