well, watso could not really make head nor tail of the netstat stuff - except that there was a local address (my machine), and a foreign address (mostly local host - and some others from time to time)
to cut a long story short, watso,was doing a "clusty" search on some of the connections, that were thrown by the firewall logs - one of which was nothing more than a web page that watso had looked at, in his search for virus's or whatever - and a trojan remover was mentioned on the website. the clusty search also had a grouping called "downlaod" - well, that was nice, - a click here and a click there, and watso had a rapidshare download - which resulted in watso having a trojan remover, which seems to have done its job (touch wood)
