Connection exists on my PC for what seems to be an ads site!!

[Julian]

I performed an nbstat and this is what I got:

C:\Documents and Settings\JMilano.JLRXMELB>netstat -b

Active Connections

Proto Local Address Foreign Address State PID
TCP it_manager_dell:1025 ads.datingyes.com:1170 ESTABLISHED 1936
[ISafe.exe]

TCP it_manager_dell:1025 ads.datingyes.com:1102 ESTABLISHED 1936
[ISafe.exe]

TCP it_manager_dell:1025 ads.datingyes.com:1028 ESTABLISHED 1936
[ISafe.exe]

TCP it_manager_dell:1027 ads.datingyes.com:1096 ESTABLISHED 1936
[ISafe.exe]

TCP it_manager_dell:1027 ads.datingyes.com:1029 ESTABLISHED 1936
[ISafe.exe]

TCP it_manager_dell:1028 ads.datingyes.com:1025 ESTABLISHED 548
[VetMsg.exe]

TCP it_manager_dell:1029 ads.datingyes.com:1027 ESTABLISHED 548
[VetMsg.exe]

TCP it_manager_dell:1096 ads.datingyes.com:1027 ESTABLISHED 292
[CAVTray.exe]

TCP it_manager_dell:1102 ads.datingyes.com:1025 ESTABLISHED 292
[CAVTray.exe]

TCP it_manager_dell:1170 ads.datingyes.com:1025 ESTABLISHED 3652
[MailWasher.exe]

TCP it_manager_dell:2483 msnews.microsoft.com:nntp ESTABLISHED
528
[msimn.exe]

TCP it_manager_dell:2484 msnews.microsoft.com:nntp ESTABLISHED
528
[msimn.exe]

TCP it_manager_dell:2489 loginnet.passport.com:http CLOSE_WAIT
528
[msimn.exe]

TCP it_manager_dell:2490 www-test.bay104.hotmail.com:http CLOSE_WAIT
528
[msimn.exe]

Why are there connections to "ads.datingyes.com"?

Here is a list of apps I am currently running on WinXP SP2:

Zone Alarm
AdsGone 2005
Mailwasher 5
SyBot V1.4
CA Vet Antivirus 7
Cam2PC
Outlook Express 6

 

[Trax]

|>TCP it_manager_dell:1029 ads.datingyes.com:1027 ESTABLISHED 548
|> [VetMsg.exe]
|>
|> TCP it_manager_dell:1096 ads.datingyes.com:1027 ESTABLISHED 292
|> [CAVTray.exe]
|>
|> TCP it_manager_dell:1102 ads.datingyes.com:1025 ESTABLISHED 292
|> [CAVTray.exe]
|>
|> TCP it_manager_dell:1170 ads.datingyes.com:1025 ESTABLISHED 3652
|> [MailWasher.exe]
|>
|> TCP it_manager_dell:2483 msnews.microsoft.com:nntp ESTABLISHED
|>528
|> [msimn.exe]
|>
|> TCP it_manager_dell:2484 msnews.microsoft.com:nntp ESTABLISHED
|>528
|> [msimn.exe]
|>
|> TCP it_manager_dell:2489 loginnet.passport.com:http CLOSE_WAIT
|>528
|> [msimn.exe]
|>
|> TCP it_manager_dell:2490 www-test.bay104.hotmail.com:http CLOSE_WAIT
|>528
|> [msimn.exe]
|>
|>Why are there connections to "ads.datingyes.com"?

Download and run TcpView
http://www.sysinternals.com/Utilities/TcpView.html

Right click on the connection, select process properties; see what
program is involved.

If your browser, check into using a HOSTS file