Posted: Tue May 22, 2007 6:52 pm Post subject: Is this normal or am I being hacked???
Hi:
I'm getting these firewall reports in my event log:
#1:
Event Type: Success Audit
Event Source: Security
Event Category: Detailed Tracking
Event ID: 861
Date: 5/22/2007
Time: 11:37:19 AM
User: ***********
Description:
The Windows Firewall has detected an application listening for incoming
traffic.
Name: FIREFOX
Path: C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.exe
Process identifier: 2664
User account: *****
User domain: NT AUTHORITY
Service: NO
RPC server: No
IP version: IPv4
IP protocol: UDP
Port number: 2858
Allowed: YES
User notified: No
This pattern continues many *28 times* until I see
#2
Event Type: Failure Audit
Event Source: Security
Event Category: Detailed Tracking
Event ID: 861
Date: 5/22/2007
Time: 11:45:21 PM
User: NT AUTHORITY\SYSTEM
Description:
The Windows Firewall has detected an application listening for incoming traffic.
it appears using UDP protocol for the following ports,
#3477, 3479, 3465, 3477, 3467 3463, 3461, 3457, 3455, 3453, etc...
events are one right after the other in my security log
NOTE: I use Tor.
Is this normal or do I have issues or something that should not be happening here? Or am I being overly paranoid.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum