Has my computer been infiltrated?
Join Date: Jul 2009
Posts: 2,787
Currently on COMODO firewall I have 1 'inbound' connection (and about 900 outbound connections).
I never have 'inbound' connections, and that 900 number is higher than normal (I can't remember what it normally is but it definitely isn't 900).
Looking through the active connections I can't see much out of the ordinary, apart from a few system exes I am not sure about. One in particular seems to be the source of the inbound connection and rather ominously I am unable to view it's full 'connection path'.
Any ideas? I am running a deep scan VIPRE scan right now which i have a paid subscription to.
Join Date: Aug 2004
Posts: 10,515
Well, what is the inbound connection on? Port and IP address.
900 outbound, if active and coupled with the inbound suggests you've become a member of a botnet.
But we need to know what application is talking on that inbound and what the outbound application is. If comodo can't give you that, its useless.
Join Date: Aug 2009
Posts: 625
Open Comodo, click on Firewall, network security policy, purge. Then look through every program left that connects to the internet, if you don't recognize it, remove it. If it's a legitimate program, the next time you go to use it, it'll pop up asking permission. If you get a pop up out of no where by something you never used, downloaded or installed, seriously check it out.