services.exe attempts to connect to 218.87.86.104

[Brian]

I am gettin the following warnings from Norton Internet
Security 2003 whenever I am connected (by dialup) to the
internet:

Microsoft Services and Controller Application (part of the
Wnidows suyb-system) is attempting to access the Internet

C:\WINNT\system32\services.exe
UDP (Inbound)
remote address: 218.87.86.104: 32777

That address is in China. Why is this Microsoft program
trying to connect with a computer in China? At the same
time that these warnings started to appear, I have also
seen an increase in attempts to connect to my computer. A
similar problem was reported recently in
microsoft.public.winxp.general

I have scanned with Norton Antivirus, Ad-aware, and Sypbot
S&D.

Thanks

 

[Marina Roos]

Is your computer fully patched?

Marina

 

[Brian McFann]

It had been patched with all critical updates through July
31. It is now fully patched. The behaviour I described
continues.

Brian

 

[Al Smith]

go into regedit...
localmach\software\microsoft\windows\current version\run

look on right pane, i had same thing happen it was a trojan, that left
NO MARK, except it was loading a program called "lanhelper4", and
another one that had winupdate3... so look for somehting in this pane
that is out of the ordinary and when you find it DELETE key...

AL