[28/Jul/2005 01:54:23] "Network" action = 'denied', descr = 'N/A', proto = 6, laddr = 0.0.0.0, raddr = 64.4.21.189, lport = 2940, rport = 80, direc = 'out', ruleId = 1275069233, proc = 'c:\WINDOWS\system32\svchost.exe' [28/Jul/2005 07:04:22] "Network" action = 'denied', descr = 'N/A', proto = 6, laddr = 0.0.0.0, raddr = 193.45.10.71, lport = 3242, rport = 80, direc = 'out', ruleId = 1744831281, proc = 'c:\WINDOWS\system32\svchost.exe' [28/Jul/2005 01:54:26] "Network" action = 'denied', descr = 'N/A', proto = 6, laddr = 0.0.0.0, raddr = 64.4.21.189, lport = 2940, rport = 80, direc = 'out', ruleId = 1275069233, proc = 'c:\WINDOWS\system32\svchost.exe' [28/Jul/2005 02:05:45] "Network" action = 'denied', descr = 'N/A', proto = 17, laddr = 0.0.0.0, raddr = 61.152.158.105, lport = 1026, rport = 56540, direc = 'in', ruleId = 1275068437, proc = 'c:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe' [28/Jul/2005 02:25:19] "Network" action = 'denied', descr = 'N/A', proto = 17, laddr = 0.0.0.0, raddr = 61.235.154.106, lport = 1026, rport = 39909, direc = 'in', ruleId = 1275068437, proc = 'c:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe' [28/Jul/2005 02:44:13] "Network" action = 'denied', descr = 'Unopened port', proto = 6, raddr = 4.79.142.206, lport = 1026, rport = 42837, direc = 'in', ruleId = 0, proc = 'N/A' [28/Jul/2005 14:42:06] "Network" action = 'denied', descr = 'Unopened port', proto = 17, raddr = 60.24.107.117, lport = 20234, rport = 7339, direc = 'in', ruleId = 0, proc = 'N/A' [28/Jul/2005 14:42:06] "Network" action = 'denied', descr = 'Unopened port', proto = 17, raddr = 219.94.62.41, lport = 20234, rport = 21389, direc = 'in', ruleId = 0, proc = 'N/A' [28/Jul/2005 14:42:07] "Network" action = 'denied', descr = 'Unopened port', proto = 17, raddr = 220.202.5.30, lport = 20234, rport = 26824, direc = 'in', ruleId = 0, proc = 'N/A' [28/Jul/2005 14:42:08] "Network" action = 'denied', descr = 'Unopened port', proto = 17, raddr = 218.64.38.127, lport = 20234, rport = 18585, direc = 'in', ruleId = 0, proc = 'N/A' [28/Jul/2005 14:42:09] "Network" action = 'denied', descr = 'Unopened port', proto = 17, raddr = 218.6.15.157, lport = 20234, rport = 14509, direc = 'in', ruleId = 0, proc = 'N/A' [28/Jul/2005 14:42:10] "Network" action = 'denied', descr = 'Unopened port', proto = 17, raddr = 218.66.9.19, lport = 20234, rport = 1385, direc = 'in', ruleId = 0, proc = 'N/A' [28/Jul/2005 14:42:11] "Network" action = 'denied', descr = 'Unopened port', proto = 17, raddr = 218.89.82.235, lport = 20234, rport = 1691, direc = 'in', ruleId = 0, proc = 'N/A' Contents of c:\WINDOWS\system32\svchost.exe: tasklist /svc svchost.exe 1912 DcomLaunch, TermService svchost.exe 1996 RpcSs svchost.exe 176 AudioSrv, Browser, CryptSvc, Dhcp, dmserver, EventSystem, FastUserSwitchingCompatibility, helpsvc, HidServ, lanmanserver, lanmanworkstation, Netman, Nla, RasMan, Schedule, seclogon, SENS, SharedAccess, ShellHWDetection, TapiSrv, TrkWks, winmgmt, wscsvc, wuauserv, WZCSVC svchost.exe 220 Dnscache svchost.exe 284 LmHosts, RemoteRegistry, SSDPSRV, WebClient