I'm not sure when it occured but there is a blocked Outgoing event for my ZoneAlarm Free Firewall. It was trying to go from my computer to another computer on port 13568, what does this mean?
Can you click on the "Prework (malware issues)" link in my signature and follow the instructions to post the requested logs? I suspect malware from first glance.
As for the Port 13568 question, it's just a port on your router. A port is basically a window. Data comes in and out of these windows all the time. However, think about your computer being a house. A burglar (malware) could come through the window at any time and invade your home. That's where a firewall comes in. The firewall blocks any incoming/outgoing connections unless configured to let specific programs transfer data thorugh the blocked port.
Well I did use an adobe connect session today with my AIMS Math tutor where we shared my screen so they could help me with some test problems. Could that have been the cause of this particular port event? I have MSE & I just ran a scan today, no malware found.
Okay I read that but what's it all basically mean? Does it mean I'm infected & the malware is trying to access the internet. I don't know how that can be since for the most part my computer runs fine & I run weekly scans with MSE only to find nothing.
Good AV choice Now does the firewall specify the exact time the connection was blocked? I have my doubts that this is the cause only because you managed to connect to the tutor, however we can look into this. I have no experience with ZoneAlarm, so bare with me. There is normally an exceptions list for firewalls that will allow specific programs go through firewalls. Can you find this exception list on the firewall and see if you allow Adobe Connect Session through the firewall?
If you're concerned, block the port. It shouldn't cause you any problems and you'll know when it does, as the app that needs it will tell you...
Yes Adobe Connect is allowed, it did say the time but not specifically. Also too I accidentally cleared the event so the only information I have is what I've provided in my main post. Normally the only blocked outgoing events my firewall ever gets is if I reset the modem or when my computer 1st boots. Although I'm not sure if they're all through the same port or not. So being that I have a good AV which says I'm clean what is trying to access this port from my computer that it's being blocked?
Well it already said that the event was blocked. It's just I don't want to be infected even if my Firewall prevents the malware from doing anything.
If you download the free tcipview it will show all the connection look for that port and see whats connected it may be a genuine connection
I will although now I just experienced some more very strange activity I must make another thread on By the way I just now ran tcipview & I can't find any listing for anything running under port 13568. In addition, I've discovered that for the most part this event only appears once in my firewall when my computer starts up or when I reset my modem. This leads me to believe & hope that it's just a legit service. Apparently I guess it was a little delayed which is why it appeared to occur later when I checked my firewall events again. I check them once when I startup & again about once every hour or 2. I'd very much appreciate yours & every 1 else's input on this new info to hopefully rule out the possibility of an infection MSE cant detect. *Scratch what I said about it being only when I start my computer up. Upon looking into more of my event logs I just now realized that there is another blocked outgoing attempt for port 35072. So now what's this mean?