Bizarre packets being sent

[XpNiNjA]

What is this i'm not even searching on the net or doing anything and these are being sent also i just did a factory format so there is no virus stuff,

 

[3D Jed]

if you mean the ones highlighted they are in the Google block

NetRange: 74.125.0.0 - 74.125.255.255

CIDR: 74.125.0.0/16

WHOIS IP Lookup - WHOIS IP Address, WHOIS IP Location, IP WHO IS Domain

do you have Chrome, Google Earth etc

 

[XpNiNjA]

Nope just firefox with Noscript Cookie monster and Https everywhere i believe its something installed in windows i have disabled plenty of services but for some reason my ports don't stealth

 

[XpNiNjA]

could it possibly be the Google toolbar? and anyway to disable it sending out info? every time i close the browser window down it quick sneaks stopping activity

 

[Callender]

Stealth Ports

Nope just firefox with Noscript Cookie monster and Https everywhere i believe its something installed in windows i have disabled plenty of services but for some reason my ports don't stealth

Which ports won't stealth? - All of them?

 

[XpNiNjA]

yes all of them besides 1

 

[Callender]

Check Router

Well I can possibly help you to stealth open ports but if they're all open and your firewall won't stealth any of them I'd suggest digging about in your router's settings. I'm not good with routers as there are too many cominations/ settings. Make sure that the Router Firewall is turned on.

 

[XpNiNjA]

all the ports are closed but they wont stealth & i had disabled the router fw because it said everything was stealthed after i did but now it doesn't anymore

 

[Alejandro85]

Stealthed ports are just for blocking incoming connections, which NAT routers deal with quite sucesfully, and even then, it's about the only thing the Windows firewall protects you by default.

The connections shown seems outgoing, which suggest a program in your computer is "phoning home". If it's really from Google as 3D Jed said, then most likely it's from the Google autoupdater service that many times sneaks with their installs.

Look in your services, try disabling it and see if those connections still appears afterwards.

 

[4wd]

Block the ip's (or ranges) with firewall and see what stops working :O)

 

[3D Jed]

Stealthed ports are just for blocking incoming connections, which NAT routers deal with quite sucesfully, and even then, it's about the only thing the Windows firewall protects you by default.

Sphynx Software make an app that switches the Windows firewall into 'all outbound blocked', then as something tries to call home you are asked yes/no (like ZoneAlarm etc). The free version lets some stuff through that it classifies as 'system' or whatever.

Windows 8 Firewall Control: Sphinx Software

makes a big clang when detecting, but that can be turned off.

For inward port firewall stealth testing, Gibson Research Shields Up is free

https://www.grc.com/x/ne.dll?bh0bkyd2

HTH

 

[Callender]

Stealth Ports

So I take it that what you were referring to as non stealthed ports in your thread here:

http://www.sevenforums.com/system-security/344477-non-stealthed-ports-no-matter-what.html

was actually outbound connections?

If you manage to work out if you have any non stealthed ports - post them!

Edit: Steve Gibson's FW test is good but PCflank can sometimes detect visible ports that GRC's test doesn't detect. It seems to vary depending on which firewall is being used. You should ideally use both tests.

 

[Tookeri]

Sphynx Software make an app that switches the Windows firewall into 'all outbound blocked'

If you want full control of all outbound connections an (IMO better) alternative is WFC by BiniSoft, see signature below.