Question regarding connection processes

yowhaddup · May 4, 2015

A few days ago I had an established TCP connection with has the process named "system" and remote host name as "kudo" or "kodu. What could this be, it seems very weird. I'm using currPorts to see this and most connections usually have a remote host name as an address.
The connection is gone now but I'm very curious to know what it was.
Is there I can find out what a process is? I'm geting very paranoid about this.
Thanks

DavidGP · May 9, 2015

Hi

Sadly very vague as to what this could be and especially as its now gone, could you have been on a remote WiFi connection in a hotel or local hotspot? Could it have been a new app you installed? a quick search does nto list apps or system files with those names, so as you say curious.

What Windows version you using?

I would to be on the safe side and as a precaution more than thinking malware as the cause as it may well be, but never know! is to run the below as written to make sure you have no malware on your system

Please read and follow the following READ & RUN ME FIRST. Malware Removal Guide and once finished please start a new thread in the Malware Forum plus a guide on how to attach the logs HOW TO: Attach Items To Your Post
Click to expand...

yowhaddup · May 10, 2015

if the process name is "system" does that mean it's a connection within my system? For example I have some processes with the name "system" but the remote host name is addresses. That's why I was a little worried when the remote host name seemed to just be a word not an actual address.
As I said I'm not very well versed in this stuff. Where could I go to learn about this stuff to sort my problem out?

Log in or Sign up

Question regarding connection processes

yowhaddup Private E-2

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

yowhaddup Private E-2