Help please - security issue

[mph999]

Guys,

Can anyone help ...

Upon starting I got a warning from my Firewall (Kerio) about "Generic Host process trying to start "Software Applivation", thinking this was my Nokia software I allowed it, it then tried to receive incoming connection from 81.23.243.152 which I cannot find any useful information on, I blocked this.

Any ideas ...

Nod32, Spybot and Windows Defender show nothing out of the ordinary having done full scans with each.

Thx in advance.

Martin

[Plotloss]

That IP Address is owned by Akamai Technologies

Ring any bells?

[ThePassenger]

Plotloss said:

That IP Address is owned by Akamai Technologies

Ring any bells?

Pretty harmless I'd say, perhaps some auto update function running for the first time?
Were you trying to run a program at the time, if so what and what else do/did you have running on your system?

It's pretty unlikley that one of Akamai's boxes has been hijacked.

[mph999]

ThePassenger said:

Plotloss said:

That IP Address is owned by Akamai Technologies

Ring any bells?

Pretty harmless I'd say, perhaps some auto update function running for the first time?
Were you trying to run a program at the time, if so what and what else do/did you have running on your system?

It's pretty unlikley that one of Akamai's boxes has been hijacked.

Akamai, sorry, not familiar, indeed I found the info from DNS but didn't recognise ... I shall go and look them up.

Was I running anything, nope, windows just started and the firewall popped up before I even logged on, warning of the app starting.

I'm normally not too worried about things (I like to thing my PC is reasonably secure), but having thought about it "Software Application" sounded a bit odd, normally s/ware identifies itself a bit more.

I'll take a look in Task Man, see what's there - I did think it was Nod32 at one point, but a quick phone call confirmed that their range of IP addresses was different.

Ahh, I just hate not knowning these things.

Thanks ...

Martin

Edited by mph999 on Saturday 4th November 00:03

[ThePassenger]

mph999 said:

Akamai, sorry, not familiar, indeed I found the info from DNS but didn't recognise ... I shall go and look them up.

They're a bit of an oddity. They provide what is in effect a seamless mirror service for the big players, means that hooge files and such come from the nearest Akamai system to you rather than from somewhere else. Very big company, use a shed load of websphere apps to pull the tricks they pull off.

Actually, doesn't Windows update hit Akamai these days, as well as MSN?

[agent006]

Vista beta went out over akamai i think.

[ThePassenger]

agent006 said:

Vista beta went out over akamai i think.

Probably the only global caching service that could take the load.