Packets are being sent to port 3515 every 10 to 20 seconds from 03bar.ktu.lt. (IP:193.219.160.132). Not sure what the language is & Google won't translate it so i'm kinda lost as to who or what they are. I am also unable to disable my connection thru the icon in the taskbar. Popup: "It is not possible to disable the connection at this time. This connection may be using one or more protocols that do not support Plug-and-Play, or it may have been initiated by another user or system account." I am the only user on this PC. Have done a full AV & Ad-aware scan & HiJackThis comes up clean, also visited PC Flank. Could someone PLEASE try & find out who these people are & what is port 3515 used for, not much on Google for my brain to understand. Thankyou for your patience Grim Is Ye Alreet

193.219.160.132 belongs to Kaunas University of Technology, Lithuania. Do you have a firewall running. If not you should have. You can use it to block this IP address. It may be that it is just Internet background noise. But a firewall is you best defense against this kind of thing. http://www.ripe.net/whois Stuart

Stuart: According to Zonealarm & http://network-tools.com/ the IP: 193.219.160.132 belongs to http://03bar.ktu.lt. This is not internet background, EVERY 10 to 20 seconds from the SAME ip. Need help here, don't know where to turn to. Is Ye Alreet

http://03bar.ktu.lt ktu = Kaunas Technology University lt = Lithuania If you have Zone Alarm. block it. Thats what its there for. What does the Zone Alarm log say? What type of packets are they? Stuart

Stuart: Just woke up, switched on PC & they are still there. Why is a Uni in Lithuania sending me packets (TCP flags:S) every 10 to 20 seconds. Always the same port: 3515. Sent an Email to there WebMaster with no reply yet. And why am i being refuesed by XP to disable my connection, only way is thru device manager or unplug the modem. Something very suspicious is going on here. Should have noticed the initials stuart - ktu.lt. Blocked them after the first 20 packets. Is Ye Alreet

High ports like this are not 'well known'. They are used for whatever a program wants to use them for. Get a firewall. We get many dozens attacks logged every day on our servers. The solution is not finding out who these people are or what specifically they are after or blocking this specific address. There are 1,000s (maybe you can add a zero or two to that) of them out there. Protect yourself. ALL ports should be blocked unless you open them for a reason. Having said that, trojans which reside on _your_ computer_ will open ports - they initiate that - and firewalls do not normally protect you from that, nor should they. In that case the solution is good anti-virus/anti-spyware software that removes them from your computer.

pmkdatabase: I have ZoneAlarm, AVG6, Ad-aware, Spybot & HiJackThis with also a few cleaners. I DO get 1000's of pings, scans & packets sent from many different IP,s & domains. The problem here is this Uni is VERY consistent. I will REPEAT again. They are sending packets every 10 to 20 seconds, WHY?. Why am i not allowed to disconnect from the net. I just uninstalled EVERY program on my PC except ZA & AVG & a few drivers. I have MS autoupdate FULLY disabled. The time sync is disabled. I never use any auto updates. As far as i can tell my PC is clean, this has got me so frustrated. I will yet again reinstall XP & see what happens. Thanks for the replies gents. Grim Is Ye Alreet