Intruder or legitimate program???

[wnied]

I have two computers on a DSL modem using ICS with WinME. Both use ZoneAlarm, and both have Norton 2001 which is updated weekly. This morning I was using Computer B, and had wildly erratic pings on BattleNET. Went and closed out game, and restarted another...same result.
Usual ping is sub 100, this was sub 100 then shot to 2000, then sub 100 again. Closed out game and shut down computer B. Did a netstat/a command on Computer A(main gateway to internet) and found a few connections I couldnt immediately identify. My startup list of programs is very small, five total I believe. Norton, Connection manager(bellsouth),MS-ICSmanager, clock and volume. One connection stood our though:

64.57.167.77:8500 Established.

I have no clue what this is, or how to verify it. It only shows up on Computer A. Not Computer B. When I ran a Tracert on it, the last legible entry was this:

csr01-ve242.aust01.exodus.net

I have no idea how to verify whether this is a legitimate program or a backdoor program. I caught someone earlier this year trying something with the NNTP ports and locked them out. Does anyone have any ideas or have this same connection on their BellSouth.net ADSL serviced computers?

Any and all help is greatly appreciated.
wnied

 

[RagManX]

Don't recognize the port as anything well known. My first reaction would be to install Ethereal (http://www.ethereal.com/) and watch all traffic to/from that destination.

RagManX

 

[Thor86]

Judging from the resolved DNS name you came up with that IP, I would half-hazard to guess it is one of battle.net's servers.