What is a Reason for Outgoing TCP Connections to Port 25 (SMTP) From Random TCP Ports on a PC with no Email Client Running?

5 pts.
Tags:
SMTP
SMTP Errors
TCP
What is a Reson for Outgoing Tcp Connections to Port 25 (SMTP) From Random Tcp Ports on a Pc with no Emamil Client Running? The IP addresses that it was trying to reach resolved to yahoo and aol webmail mx servers. I am trying to track down a spam virus in a network, is this sysmptoms of the virus.

Answer Wiki

Thanks. We'll let you know when a new response is added.

It certainly could be. VIruses can replicate using email from an infected client.

Discuss This Question: 3  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • carlosdl
    It could also be other type of malware, such as a key logger or other type of spyware. These programs use to have smtp functionality to send data they gather from the victim.
    79,925 pointsBadges:
    report
  • Denny Cherry
    It's something sending out email that shouldn't be. One way to stop this is to block all computers from connecting from inside your network to outside your network on port 25, except for the machines which should be (your Exchange mail gateway for example).
    67,540 pointsBadges:
    report
  • The Most-Watched IT Questions: July 6, 2010 - ITKE Community Blog
    [...] RockAmadeus was wondering about possible reasons for Outgoing TCP Connections to Port 25 (SMTP) From Random TCP Ports on a PC with n.... Mattmather, Carlosdl and Mr. Denny weighed [...]
    0 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.

Following

Share this item with your network: