I been receiving an alerts that winlogon.exe is trying to connect to 220.127.116.11:53 and 18.104.22.168:80 (www.notyourbusiness.com). I checked to make sure that winlogon.exe is in the proper location: c:\windows\system32\winlogon.exe. I've blocked the IP address so it won't allow any outgoing messages. I ran full Symantec Norton Antivirus (2006) and Webroot Spy Sweeper v4.5 scans and found no viruses, spyware or malware. Any Ideas on how I can stop these outgoing connection attempts?
Operating System:Windows XP Pro
Product Name:ZoneAlarm Internet Security Suite