SYSTEM Connection Attempt

Windows ME 4.9.3000
IE 6.00.2800.1123
AVG Antivirus Plus Firewall 7.5.448

Periodically a Dialog Box with the information below pops up after I have
connected to the Internet. This will happen two or three times in a row and
then I won't see it for about a month. I am guessing that it is some kind of
upgrade attempt by Windows.

My antivirus is active and scans regularly, the firewall is in place and
functioning, I run Adaware and Spybot regularly and do not find any
indication of a virus or malware.

What is causing this?
----------------------------------------------------------------------------
--------------------------------------------------
Application "SYSTEM" Is trying to establish connection with remote IP
address 216.248.131.235.

Do you want to allow this communication? Allow Deny

This confirmation is related to a system communication and therefore a
simple rule cannot be created in this case. If you wish to handle such
communication, create a rule for system services and protocols using the
System Service Rule Properties dialog.

Application: SYSTEM
Full path: SYSTEM
Local address: localhost 1237
Remote Address: 216.248.131.235 : 80
Connection: TCP connection
Direction: Out

--
~^~^~^~^~^~^~^~^~^~^~^~^~^~^
When in charge, ponder; when in trouble, delegate; when in doubt, mumble.

Dave

It's not related to Windows nor Microsoft at all.

http://www.dnsstuff.com/tools/ipall....16.248.131.235
http://www.dnsstuff.com/tools/whois....16.248.131.235

Any of the above ring a bell ?

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


Dave wrote:

Windows ME 4.9.3000
IE 6.00.2800.1123
AVG Antivirus Plus Firewall 7.5.448

Periodically a Dialog Box with the information below pops up after I have
connected to the Internet. This will happen two or three times in a row and
then I won't see it for about a month. I am guessing that it is some kind of
upgrade attempt by Windows.

My antivirus is active and scans regularly, the firewall is in place and
functioning, I run Adaware and Spybot regularly and do not find any
indication of a virus or malware.

What is causing this?
----------------------------------------------------------------------------
--------------------------------------------------
Application "SYSTEM" Is trying to establish connection with remote IP
address 216.248.131.235.

Do you want to allow this communication? Allow Deny

This confirmation is related to a system communication and therefore a
simple rule cannot be created in this case. If you wish to handle such
communication, create a rule for system services and protocols using the
System Service Rule Properties dialog.

Application: SYSTEM
Full path: SYSTEM
Local address: localhost 1237
Remote Address: 216.248.131.235 : 80
Connection: TCP connection
Direction: Out

I don't recognize anything in these two pages. And . . . I don't have any
connection to the companies or the cities mentioned. It's still a mystery as
to why my SYSTEM would try to connect . . .

--
Dave

"MowGreen [MVP]" wrote in message
...
It's not related to Windows nor Microsoft at all.

http://www.dnsstuff.com/tools/ipall....16.248.131.235
http://www.dnsstuff.com/tools/whois....16.248.131.235

Any of the above ring a bell ?

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============


Dave wrote:

Windows ME 4.9.3000
IE 6.00.2800.1123
AVG Antivirus Plus Firewall 7.5.448

Periodically a Dialog Box with the information below pops up after I
have
connected to the Internet. This will happen two or three times in a row
and
then I won't see it for about a month. I am guessing that it is some
kind of
upgrade attempt by Windows.

My antivirus is active and scans regularly, the firewall is in place and
functioning, I run Adaware and Spybot regularly and do not find any
indication of a virus or malware.

What is causing this?

--------------------------------------------------------------------------
--
--------------------------------------------------
Application "SYSTEM" Is trying to establish connection with remote IP
address 216.248.131.235.

Do you want to allow this communication? Allow Deny

This confirmation is related to a system communication and therefore a
simple rule cannot be created in this case. If you wish to handle such
communication, create a rule for system services and protocols using the
System Service Rule Properties dialog.

Application: SYSTEM
Full path: SYSTEM
Local address: localhost 1237
Remote Address: 216.248.131.235 : 80
Connection: TCP connection
Direction: Out

If you have no idea why the SYSTEM is attempting to connect to the DNS
listed, then deny it.

MG

Dave wrote:

I don't recognize anything in these two pages. And . . . I don't have any
connection to the companies or the cities mentioned. It's still a mystery as
to why my SYSTEM would try to connect . . .

You're right, of course, and that's what I do. I was just trying to figure
out who or what was trying to be connected to my computer.

Thank you

Dave

"MowGreen [MVP]" wrote
If you have no idea why the SYSTEM is attempting to connect to the DNS
listed, then deny it.

MG

Dave wrote:

I don't recognize anything in these two pages. And . . . I don't have
any
connection to the companies or the cities mentioned. It's still a
mystery as
to why my SYSTEM would try to connect . . .

Do you have anything wireless?
Is that firewall part of the AVG?
I would likely keep at it until I found an answer.
Port 80 has a legitamate use. I think Winamp has an option to use it with
proxy.
Somewhere there is a list of what each port is used for, legitamately, which
might give a hint.
Does your firewall give any more details, such as files involved. ZA has a
feature that will check for changed files trying to access and close the
door when necessary.
If running a hardware router/firewall, you might check the logs there as
well, but if you have already been slipped a trojan, deny is best until you
figure it out.

Norman
"Dave" wrote in message
...
You're right, of course, and that's what I do. I was just trying to figure
out who or what was trying to be connected to my computer.

Thank you

Dave

"MowGreen [MVP]" wrote
If you have no idea why the SYSTEM is attempting to connect to the DNS
listed, then deny it.

MG

Dave wrote:

I don't recognize anything in these two pages. And . . . I don't have
any
connection to the companies or the cities mentioned. It's still a
mystery as
to why my SYSTEM would try to connect . . .

Is Deltacom your internet provider ?
http://www.deltacom.com/internet.asp

MG


Dave wrote:

You're right, of course, and that's what I do. I was just trying to figure
out who or what was trying to be connected to my computer.

Thank you

Dave

"MowGreen [MVP]" wrote

If you have no idea why the SYSTEM is attempting to connect to the DNS
listed, then deny it.

MG

Dave wrote:


I don't recognize anything in these two pages. And . . . I don't have

any

connection to the companies or the cities mentioned. It's still a

mystery as

to why my SYSTEM would try to connect . . .

MowGreen, why do you have to be such a "SMART ASS"
The man was asking a question, If you do not have a responsible
answer, i suggest you keep you "SMART ASS", mouth shut.

Are you a bit dense?? He was telling him to *deny access* to it. I
would call that a *responsible answer*......particularly when no one
seemed to know what was doing it.

DUH!!

"Larry" wrote in message
news:Z3SNh.3955$xE.2188@trnddc08...
MowGreen, why do you have to be such a "SMART ASS"
The man was asking a question, If you do not have a responsible
answer, i suggest you keep you "SMART ASS", mouth shut.

Best to let sleeping dogs lie, Larry. You obviously DO NOT know what you
are talking about

MG

Larry wrote:

MowGreen, why do you have to be such a "SMART ASS"
The man was asking a question, If you do not have a responsible
answer, i suggest you keep you "SMART ASS", mouth shut.