am I infected?

BlueMak

A few min ago I received a warning by my software firewall that "windows operating system" tried to receive incoming connection. I was trying to look for wtf that was when the pop up went away, so it will probably appear again, but, what was it? A trojan, something else?

here is a screenshot from my firwall showing the process? Or am I just being paranoid?

Attached Thumbnails

 

__________________

The people who are regarded as moral luminaries are those who forego ordinary pleasures themselves and find compensation in interfering with the pleasures of others(Bertrand Russell)"You go into Afghanistan, you got guys who slap women around for five years because they didn't wear a veil,You know, guys like that ain't got no manhood left anyway. So it's a hell of a lot of fun to shoot them." - Lt. Gen. James N. Mattis
This is slavery, not to speak one's thought. [Euripides-The Phoenician Women (c.411-409 B.C.)] http://www.macedonia.info/FALLACIESANDFACTS.htm Sic semper tyrannis.

charm_quark

actually, you know your not saying a lot!,,, doesnt your firewall have a log or some thing, that show's what kind of connection it was...... what were you doing when the pop up, "popped up"

BlueMak

Short answer, no.

__________________

The people who are regarded as moral luminaries are those who forego ordinary pleasures themselves and find compensation in interfering with the pleasures of others(Bertrand Russell)"You go into Afghanistan, you got guys who slap women around for five years because they didn't wear a veil,You know, guys like that ain't got no manhood left anyway. So it's a hell of a lot of fun to shoot them." - Lt. Gen. James N. Mattis
This is slavery, not to speak one's thought. [Euripides-The Phoenician Women (c.411-409 B.C.)] http://www.macedonia.info/FALLACIESANDFACTS.htm Sic semper tyrannis.

GigaWatt

well it could be some kind of a malicious software... but i wouldn't count on it on coming back if you blocked it and made a block rule on that IP and that port...

did you try to make a whois on the IP of the incoming connection...?

__________________
It's not schisophrenia... it's just a voice in my head...

BlueMak

I didn't block it.
The warning from the firewall went away. The box for "allow" was ticked, but the box for "remember choise" was not, so I hope that even if it allowed it, it will ask me again next time if there is a next time.

I rebooted the system and opened the Active Process List and it has it there again, only this time it has a branch "system" which it too has one smss.exe

I don't know, I am thinking perhaps it was a fluke.
Also, the anti virus never noticed anything.
I am tempted turning back UAC on.

__________________

The people who are regarded as moral luminaries are those who forego ordinary pleasures themselves and find compensation in interfering with the pleasures of others(Bertrand Russell)"You go into Afghanistan, you got guys who slap women around for five years because they didn't wear a veil,You know, guys like that ain't got no manhood left anyway. So it's a hell of a lot of fun to shoot them." - Lt. Gen. James N. Mattis
This is slavery, not to speak one's thought. [Euripides-The Phoenician Women (c.411-409 B.C.)] http://www.macedonia.info/FALLACIESANDFACTS.htm Sic semper tyrannis.

RoyBatty

I have a few of these connections blocked in my log too and I'm quite sure my system is not infected in any way. I use the "block all incoming connections" option in Comodo so that I don't have to bother with these.