Did my Skype get infected?

Hello everyone,

It looks like it's been a while since I saw a "is Skype safe?" type of
thread here, and I have something new (to me, anyways) happening here.

Here is a piece of netstat -o dump from one of my PCs:

TCP machine:1046 res-152-3-82-248.dorm.duke.edu:24403 ESTABLISHED 2432

The PID 2432 translates to skype.exe

Shut Skype down, the connection disappeared.

WTF? Dorm? at Duke? legit Skype connection?

Can anyone familiar with the way Skype operates fill in here please?

Thanks!

D~


##-----------------------------------------------#
Delivered via http://www.secure-gear.co
The Internet Knowledge Base for the security industr
no-spam access to your favorite newsgroup -
alt.computer.security - 9440 messages and counting
##-----------------------------------------------##

DA

DA wrote:

> Hello everyone,
>
> It looks like it's been a while since I saw a "is Skype safe?" type of
> thread here, and I have something new (to me, anyways) happening here.
>
> Here is a piece of netstat -o dump from one of my PCs:
>
> TCP machine:1046 res-152-3-82-248.dorm.duke.edu:24403 ESTABLISHED 2432
>
> The PID 2432 translates to skype.exe
>
> Shut Skype down, the connection disappeared.
>
> WTF? Dorm? at Duke? legit Skype connection?

man P2P

> Can anyone familiar with the way Skype operates fill in here please?

Simply said, it's P2P and it's insecure, so this one could be legitimate or
not. Who knows...

Sebastian Gottschalk

From: "Sebastian Gottschalk" <>


|
| Simply said, it's P2P and it's insecure, so this one could be legitimate or
| not. Who knows...

This is ONE item I will agree with you on !

I had a user yesterday who was found with it on his notebook in violation of our enterprise
ban on P2P and IM software.

I had to confiscate his notebook and re-image it !

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

David H. Lipman

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote:

> I had a user yesterday who was found with it on his notebook in
> violation of our enterprise
> ban on P2P and IM software.

I had a request from a sales representative to be allowed to use it.
Since he wanted to travel to China, I informed him that using encrypted
communications software that circumvents the state-owned telecoms
monopoly might not be a good idea in a communist country

Juergen Nieveler
--
Romanes eunt domus!

Juergen Nieveler