Event ID: 4226 - Event Source: Tcpip

[BoazBoaz]

What am I suppose to do with that ??


Included: 1) HELP AND SUPPORT CENTER message 2) Event log 3) Netstat with
the SYN_SENT elements:
=============================================================================================================
User Action
This event is a warning that a malicious program or a virus might be running
on the system. To troubleshoot the issue, find the program that is
responsible for the failing connection attempts and, if the program might be
malicious, close the program as follows.

=============================================================================================================
Event Type: Warning
Event Source: Tcpip
Event Category: None
Event ID: 4226
Date: 5/9/2006
Time: 7:56:35 PM
User: N/A
Computer: BOAZ-202ILHWJ43
Description:
TCP/IP has reached the security limit imposed on the number of concurrent
TCP connect attempts.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 01 00 54 00 ......T.
0008: 00 00 00 00 82 10 00 80 ....?..?
0010: 01 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........

=============================================================================================================
Tue 05/09/2006 19:56:37

Active Connections

Proto Local Address Foreign Address State PID
TCP boaz-202ilhwj43:3945 61.151.255.102:http SYN_SENT 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3972 mail.ahtdirect.info:http SYN_SENT
2376
[iexplore.exe]

TCP boaz-202ilhwj43:3978 bzq-25-69-143.cust.bezeqint.net:http
SYN_SENT 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3979 62-90-26-110.barak-online.net:http SYN_SENT
2376
[iexplore.exe]

TCP boaz-202ilhwj43:2728 by2m6-cs76.msgr.hotmail.com:1863
ESTABLISHED 3672
[msnmsgr.exe]

TCP boaz-202ilhwj43:3937 213.8.106.122:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3938 213.8.106.122:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3939 192.115.84.15:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3940 213.8.106.122:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3942 66.249.93.99:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3944 195.137.184.101:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3946 213.8.106.122:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3947 213.8.106.122:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3949 62-90-26-110.barak-online.net:http
ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3950 c10-sha-image-lb.cnet.com:http ESTABLISHED
2376
[iexplore.exe]

TCP boaz-202ilhwj43:3951 vh10263.moc.gbahn.net:http ESTABLISHED
2376
[iexplore.exe]

TCP boaz-202ilhwj43:3952 glory.ispgateway.de:http ESTABLISHED
2376
[iexplore.exe]

TCP boaz-202ilhwj43:3953 www.webwombat.com:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3954 bzq-25-69-143.cust.bezeqint.net:http
ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3955 bzq-25-69-144.cust.bezeqint.net:http
ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3956 bez7.agate.co.il:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3957 bzq-25-69-144.cust.bezeqint.net:http
ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3958 b4.f3.5646.static.theplanet.com:http
ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3959 212.199.125.39.static.012.net.il:http
ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3960 cmscache.clickability.com:http ESTABLISHED
2376
[iexplore.exe]

TCP boaz-202ilhwj43:3961 61.151.243.29:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3962 bzq-25-69-144.cust.bezeqint.net:http
ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3964 bzq-25-69-151.cust.bezeqint.net:http
ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3965 bzq-25-69-151.cust.bezeqint.net:http
ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3966 bzq-25-69-143.cust.bezeqint.net:http
ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3967 smtp.axentus.net:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3968 varp1.fra.xpc-mii.net:http ESTABLISHED
2376
[iexplore.exe]

TCP boaz-202ilhwj43:3969 vhosts.gospelcom.net:http ESTABLISHED
2376
[iexplore.exe]

TCP boaz-202ilhwj43:3970 69.20.57.174:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3971 mail.ahtdirect.info:http ESTABLISHED
2376
[iexplore.exe]

TCP boaz-202ilhwj43:3973 bzq-25-69-144.cust.bezeqint.net:http
ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3974 vrp1.fra.xpc-mii.net:http ESTABLISHED
2376
[iexplore.exe]

TCP boaz-202ilhwj43:3975 storage1.flickr.vip.mud.yahoo.com:http
ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3976 barosh.net:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3977 www.misgav.org.il:http ESTABLISHED 2376
[iexplore.exe]

TCP boaz-202ilhwj43:3948 62-90-26-110.barak-online.net:http LAST_ACK
2376
[iexplore.exe]
=============================================================================================================

 

[jmatt]

What am I suppose to do with that ??

You receive Event ID 4226 in the System event log on Windows XP SP2?
http://www.jsifaq.com/SUBU/tip10300/rh10301.htm

 

[BoazBoaz]

Thank
But before I try it ...

What should I learn from the Netstat with
the SYN_SENT elements ? lots of the elements there are unknown to me !!!
could it be something nasty ??

 

[jmatt]

Thank
But before I try it ...
What should I learn from the Netstat with
the SYN_SENT elements ? lots of the elements there are unknown to me !!!
could it be something nasty ??

No idea, all I did before is put Event ID 4226 into a search engine.

http://www.google.com.au/search?hl=en&q=Event+ID+4226+&btnG=Google+Search&meta=

 

[Guest]

All ready done.

I'm trying to understand the setstat output !!!