learned about nmap and did a port scan on myself.
two things stood out as "whafuck!?"'s, and no amount of googling around gave me any userful information on them: ports "miroconnect" and "virtual places" were open. And "miroconnect" had a connection established.
I couldn't get netstat to tell me anything interesting, but I finally stumbled on "lsof" which rattled off the process that had those ports open with aplomb. my icq client. silly me. fucking peer to peer connections. :)