G'day Martin,
consensus here in my office is:
a) Zone Alarm "weirdness" - ZA can be very invasive and this could simply be an error on it's part.

b) Malware - possibly masquerading as a running process - in this case BBW, or being mixed up with a running process by ZA.

Either way, a comprehensive malware scan is indicated. At the moment "Malwarebytes" ( http://www.malwarebytes.org ) is a reasonably good scanner that doesn't seem to miss much, if anything. Spybot Search and Destroy ( http://www.safer-networking.org/en/home/index.html ) is another goodie. I'd probably run both.

The destination address in question is a "multicast" address - kind of like a broadcast but for the local network and with specific destinations defined by the last octet (byte) of the address - in this case .22 which is IGMP (Internet Group Management Protocol)

Quote:


RFC 988, page 13: ( http://www.networksorcery.com/enp/rfc/rfc988.txt )
The Internet Group Management Protocol (IGMP) is used between IP hosts and their immediate neighbor multicast agents to support the creation of transient groups, the addition and deletion of members of a group, and the periodic confirmation of group membership. IGMP is an asymmetric protocol and is specified here from the point of view of a host, rather than a multicast agent.




See :
http://www.networksorcery.com/enp/protocol/ip/multicast.htm
http://www.networksorcery.com/enp/protocol/igmp.htm
for a little additional info.

It is unlikely in the extreme that BBW.EXE is actually the culprit here. Without knowing more about your network it would be hard to identify what is going on other than your machine appears to be trying to query or join a "transient group" on the local network - I reckon this could be a network worm although there is legitimate traffic of this nature on most networks. The reason I think it's a worm is that it appears to be BBW and we know (thanks to Peter) that BBW definitely does not use IP communications directly.


--=-- My credo: If it's worth doing, it's worth overdoing - just ask my missus, she'll tell ya laugh --=--
You're only paranoid if you're wrong!