Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Process Explorer ?
Search Topic:
Uniqs:
418
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Hosts file?? »
« Any good free antivirus comparrisons?  
AuthorAll Replies


norwegian
Premium
join:2005-02-15
Outback
·WestNet Broadband


1 edit
Process Explorer ?

ethercapt.zip 1,248 bytes
(ethercapt)
When i open up this program, i am getting UDP to 131.107.115.28 via my DNS port 53, which is Crl.Microsoft. I have never seen this before tonight. Anyone explain it at all

Here's the logs if anyone needs them

It seems to only get as far as SYN_SENT on TcpView


norwegian
Premium
join:2005-02-15
Outback
·WestNet Broadband

Click for full size
Well it isn't going away. I cleaned out KAH ruleset, and just got this screen shot looking at DEP rules
Might go have a chat at Sysinternals on this.

Tuulilapsi
Kenosis

join:2002-07-29
Finland

reply to norwegian
You seriously need to stop worrying about everything and the kitchen sink. That's Process Explorer trying to verify image signatures, nothing harmful at all.
--
Want security? Run as limited user.


norwegian
Premium
join:2005-02-15
Outback
·WestNet Broadband

reply to norwegian
It is just that i have not seen anything like this till the last 2 weeks, never before at all, and it didn't do this when i first updated to the new version, i think i had it on near a month before i saw this. It isn't worry either, just curious questions as i learn about the internet and software Tuulilapsi.
So if it a new addition to the the product, no worries. As a home user i have niether a technical background nor University degree, so don't take offence at my questions.


norwegian
Premium
join:2005-02-15
Outback
·WestNet Broadband

reply to Tuulilapsi
said by Tuulilapsi See Profile :

You seriously need to stop worrying about everything and the kitchen sink. That's Process Explorer trying to verify image signatures, nothing harmful at all.
It has been confirmed at Sysinternals Tuulilapsi, guess a month late is better than not at all


XBL2009
------

join:2001-01-03
Chicago, IL
reply to norwegian
CRL = certificate revoke list
Forums » Up and Running » Security » SecurityHosts file?? »
« Any good free antivirus comparrisons?  


Wednesday, 25-Nov 15:45:59 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.republican-creole
page compression OFF
Most commented news this week
· [104] New AT&T Ad Campaign Hits Back At Verizon
· [94] Apple Joins AT&T Verizon Snark Fest
· [85] New Bill Takes Aim At Higher Verizon ETFs
· [54] Time Warner Cable Fires Broadside At Broadcasters
· [48] In-Flight Internet Headed For Bumpy Landing?
· [44] TiVo Sees Record Customer Losses
· [32] Senators Want ACTA Made Public
· [30] Earthlink Suffers From Major E-mail Outage
· [30] AT&T Offers New Prepaid Wireless plans
· [28] Frontier Increases Modem Rental Fee
Most people now reading
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Whats the big deal about being "Old School"....? [World of Warcraft]
· Came from FIOS to Comcast and.....I'm glad I did! [Comcast HSI]
· Climate Change Scandal Erupts After Email Hack. [Security]
· Windows 7 boot manager editing questions [Microsoft Help]
· [ PvE] Items that will just not drop in your raid [World of Warcraft]
· What is the spell hit cap for a lvl 80 full arcane spec mage [World of Warcraft]
· How do people get virut infection [Security]
· Telemarketing Hell: Heather's back [Spam, Scam and Phishbusters]
· [Rant] Damn Sermons through my speakers! [Rants, Raves, and Praise]