gary
Thu Aug 26 00:27:05 CDT 2004
your firewall should not allow 'pings' and should run in
'stealth mode'
scan with spybot at safer-networking.org to be sure you
have no spyware on your system.
>-----Original Message-----
>but you said:
>>> is activated, my firewall ("zero-knowledge Freedom")is
>>> programmed to ask me whether to accept or deny access
>to
>>> my computer from outside servers that are ostensibly
>>> related to various software programs. One of the
>programs
>>> for which i receive a message is Windows Explorer. What
>
>asking about access 'to my computer from outside' which
implies that the
>outside server is trying to connect to you. if it is your
machine trying to
>connect out to those two ip's i would start scanning for
spyware or adware
>unless you have some application from someone on those
machines that is
>calling home looking for updates.
>
><anonymous@discussions.microsoft.com> wrote in message
>news:d00601c48acb$7d765e00$a501280a@phx.gbl...
>> I am a novice at all this so please forgive me if I am
>> asking about obvious things. I have set up my firewall to
>> ask my permission anytime an application on my system
>> seeks access to the web. The notices which pop-up suggest
>> that Windows Explorer is attempting to connect to
>> external servers. The IP addresses for the servers with
>> which it is attempting to communicate with are always the
>> same 2 addresses: one in Russia and one in Germany.
>> I am still unsure as to whether or not it is normal for a
>> file indexing program (which is how I would characterize
>> Windows Explorer) to need to check in with the mother
>> ship for updates etc. If it is, it would appear that the
>> Windows Explorer program has been corrupted and it no
>> longer remembers the correct IP address with which it
>> needs to communicate. The correct IP address has been
>> replaced by these bogus IP addresses in Russia and
>> Germany. My questionss therefore are:
>> a)What do I need to do to Windows Exlorer to delete these
>> bogus IP addresses and
>> b)How do I restore the correct IP address in WE so that
>> it can find the correct server with which to communicate?
>>
>>
>>
>> >-----Original Message-----
>> >why do you think its microsoft trying to access you?
>> you are most likely
>> >seeing port scans from virus infected machines looking
>> for open machines to
>> >infect. they would be trying various ports that would
>> normally be used by
>> >windows explorer to share files. the best action is to
>> turn off
>> >notifications of junk like that, your firewall is doing
>> its job, there is
>> >really no reason for you to listen to it bragging about
>> it.
>> >
>> >"chiefjay" <anonymous@discussions.microsoft.com> wrote
>> in message
>> >news:d3e501c48ab9$c9a36cd0$a601280a@phx.gbl...
>> >> I am not sure if i am posting to the correct newsgroup,
>> >> but here goes. When I start my computer and the
>> firewall
>> >> is activated, my firewall ("zero-knowledge Freedom")is
>> >> programmed to ask me whether to accept or deny access
>> to
>> >> my computer from outside servers that are ostensibly
>> >> related to various software programs. One of the
>> programs
>> >> for which i receive a message is Windows Explorer. What
>> >> seems odd to me is that the IP address of the remote
>> >> server is alternatively in Russia and berlin germany.
>> >> Does Microsoft really host some of its stuff on servers
>> >> in Russia and germany. For Russia, the host name is
>> >> listed as 62.118.251.84 and the destination IP address
>> >> is : v20-u.valuehost.ru
>> >> For Berlin, the Host name is 141.45.186.7 and the
>> >> destination IP is: dozenten.f1.fhtw-berlin-de
>> >> Does this seem odd or am I getting paranoid?
>> >> If this is a spoof, how do I stop their server from
>> >> attempting to access my system?
>> >>
>> >
>> >
>> >.
>> >
>
>
>.
>