We just upgraded our Windows XP machine to braodband (DSL)
from dial-up. Since I have a history with it, I decided to install
ZoneAlarm Free. Immediately after rebooting Windows after
the installation, I started to receive repeated Zone Alarm protection
popups for TCP port 24421. These popups have persisted for two days,
and they occur at an interval of 2-4 minutes. Very occasionally, another port
is protected.
Our machine is still at all default installation settings. Can someone suggest
a cause for this behavior ? I've read that some protocols (NetBIOS) can
cause repeated detections/protections. Or, is this likely a question of
nefarious penetration ? Would malware authors repeatedly hit the same port ?
I've noticed 10-20 different source IP's for all the probes. Is there a good source
for the basics of port attacks in and out of Zonelabs ? I'm not nearly an
expert about this subject.


Operating System:Windows XP Pro
Software Version:8.0
Product Name:ZoneAlarm (Free)