webclnt.exe ???
Tim
stopped it. It was in my msconfig startup list. I've never seen it before.
Norton does not see anything wrong with it. I changed the name and removed
the msconfig start up link. Goggle search found nothing. Any ideas?
c:\windows\system32\webclnt.exe
Kerio Personal Firewall:
'WEBCLNT.EXE' from your computer wants to connect to
lineaAR50.velocom.com.ar [200.59.49.50], port 80
size: 53.2 kb
Address lookup
canonical name lineaar50.velocom.com.ar.
aliases
addresses 200.59.49.50
Domain Whois record
Queried with "velocom.com.ar"...
Query error: NoWhoisServerForDomain
Network Whois record
Queried whois.lacnic.net with "200.59.49.50"...
% Copyright LACNIC lacnic.net
% The data below is provided for information purposes
% and to assist persons in obtaining information about or
% related to AS and IP numbers registrations
% By submitting a whois query, you agree to use this data
% only for lawful purposes.
% 2004-10-29 08:21:46 (BRT -03:00)
inetnum: 200.59.32/19
status: allocated
owner: VELOCOM
ownerid: AR-VELO-LACNIC
responsible: Poc Velocom
address: San Martin, 638,
address: C1004AAN - Buenos Aires -
country: AR
phone: +54 11 4316-1400 [1452]
owner-c: DAR3
tech-c: DAR3
inetrev: 200.59.32/19
nserver: NS1.VELOCOM.COM.AR
nsstat: 20041027 UDN
nslastaa: 20020830
nserver: NS2.VELOCOM.COM.AR
nsstat: 20041027 UDN
nslastaa: 20020830
remarks: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
remarks: ********************************************
remarks: Reassignment information for this block is
remarks: available at rwhois.velcom.net.ar.-
remarks: *******************************
created: 20000810
changed: 20001027
nic-hdl: DAR3
person: POC Velocom
e-mail: n...@COMNET.COM.AR
address: San Martin, 638,
address: C1004AAN - Buenos Aires -
country: AR
phone: +54 11 4316-1452 []
created: 20030224
changed: 20040212
Gabriele Neukam
> 'WEBCLNT.EXE' from your computer wants to connect to
> lineaAR50.velocom.com.ar [200.59.49.50], port 80
Look at the thread
news: Message-ID: <2fi2o0d3vbcf8uoav...@4ax.com>
Obviously, you both were hit by the same thing. Did you receive a mail
with a very short or even empty subject, and a :) or :)) as "text"?
There is a new Bagle variant spreading, but I haven't heard about its
contacting an Argentinian server.
Gabriele Neukam
--
Ah, Information. A property, too valuable these days, to give it away,
just so, at no cost.
Tim
Gabriele Neukam
> Sorry, but how do I view the thread? It looks like an email address.
>
>
> > Look at the thread
> > news: Message-ID: <2fi2o0d3vbcf8uoav...@4ax.com>
Either remove the space between news: and the rest (sorry, it shouldn't
have been there - OE is a bit dumb re news thread IDs), or enter
http://groups.google.com, go to advanced search and enter the portion
from "Message:" to the end, into the appropriate field.
Roger Wilco
"Tim" <Tims-N...@carolina.rr.comRemove#s> wrote in message news:jROgd.11435$YL.15...@twister.southeast.rr.com...
> Sorry, but how do I view the thread? It looks like an email address.
OE guesses anything with an @ in it is "mailto:", but this should have been "news:"