need advice on a firewall entry

myusername

Diamond Member
Jun 8, 2003
5,046
0
0
screencap of kerio
01.jpg 02.jpg 03.jpg 04.jpg

Okay, I've been running this box with all but the necessary workstation services disabled, file and printer sharing disabled, internet explorer core is totally stripped from the system and I'm using Opera for surfing and Kerio PF. Been running without event for half a year or more.

I thought my system was pretty tight, but I wanted to connect another box (via netgear switch/router), so I just enabled the Server Service and the Computer Browser Service .. File and Printer Sharing is NOT enabled at the adapter. As a result of enabling the Server Service, I end up with Kerio popping up several outgoing connection attempts, which I deny.

outgoing
-Microsoft File and Printer Sharing
-local point 0.0.0.0:1186
-remote point 127.0.0.1:445

outgoing (this repeats 3 times)
-Microsoft File and Printer Sharing
-local point 192.168.0.3:1188
-remote point 128.77.59.140:139

This has happened several times now, each time with a different local port (but always netbios 139 on the receiving side).

I am unable to traceroute or reverse dns the offending address (128.77.59.140) which in and of itself suggests to me that this is not a good thing for my computer.

So any of you guys have any ideas as to what has infested my computer?
 

myusername

Diamond Member
Jun 8, 2003
5,046
0
0
Bump for the day crowd.

AVG antivirus, Spybot S&D, and AdAware SE all show clean as a whistle.