Reply to thread

Message

<blockquote data-quote="robbo100" data-source="post: 602040" data-attributes="member: 91446">Hi there,Looking in more detail, I think it might be that there is some spyware on my HTPC. If I look at my wireshark output in detail, it seems to be my HTPC (192.168.1.2) which transmits to my Macbook wireless adapter (192.168.1.3) - for example, from source port &quot;sweetware - apps [1221] to destination post 31456 [SYN]&quot; (shown as a TCP SYN/FIN type of transmission by wireshark). Then a couple of lines later there is a TCP RST return from the Macbook to the HTPC with the same port details.sweetware - apps is only one example of lots, such as &quot;shockwave2&quot;, &quot;tsdos390&quot;, &quot;serialgateway&quot; etc etc.I have AVG free installed but don't have a spyware detector installed. I have installed adaware and am running a scan now. Could it be that the spyware was completely happy with the old router, but with the new one installed (with better firewall) things are being blocked (to the dislike of the HTPC???Since it seems to be only a problem with the HTPC trying to transmit to 192.168.1.3, I have changed the IP address of the macbook routing table to 192.168.1.5 and it has instantly solved the problem. However, clearly I want to stop the HTPC from continually sending SYN packets on the the network to nothing!Does all of this sound sensible to people who understand much more about networking than me???ThanksRobbo100</blockquote>

[QUOTE="robbo100, post: 602040, member: 91446"] Hi there, Looking in more detail, I think it might be that there is some spyware on my HTPC. If I look at my wireshark output in detail, it seems to be my HTPC (192.168.1.2) which transmits to my Macbook wireless adapter (192.168.1.3) - for example, from source port "sweetware - apps [1221] to destination post 31456 [SYN]" (shown as a TCP SYN/FIN type of transmission by wireshark). Then a couple of lines later there is a TCP RST return from the Macbook to the HTPC with the same port details. sweetware - apps is only one example of lots, such as "shockwave2", "tsdos390", "serialgateway" etc etc. I have AVG free installed but don't have a spyware detector installed. I have installed adaware and am running a scan now. Could it be that the spyware was completely happy with the old router, but with the new one installed (with better firewall) things are being blocked (to the dislike of the HTPC??? Since it seems to be only a problem with the HTPC trying to transmit to 192.168.1.3, I have changed the IP address of the macbook routing table to 192.168.1.5 and it has instantly solved the problem. However, clearly I want to stop the HTPC from continually sending SYN packets on the the network to nothing! Does all of this sound sensible to people who understand much more about networking than me??? Thanks Robbo100 [/QUOTE]

Verification