Stange Thing.. Windows Explorer asking for Connection

[FireDancer]

Hi all,

The other day I was onlince and got a prompt that Windows Explorer wanted to connect to the net.
In my haste and haveing my attention directed else
where at the time I looked very breifly and told Kerio to deny it. Like I said in my haste I did not read where or what it was wanting to connect to.

I have made a rule to block Win Explorer TCP out any/any
for now. I am wondering in what instances would Windows Explorer want /need to connect to the net?

Regards,
FireDancer

[CrazyM]

Hi FireDancer

Windows Explorer is just as Internet capable as Internet Explorer.
Without knowing exactly what you were doing at the time, we could only speculate as to how and why Explorer accessed the file with the link.

There is no problem with blocking Explorer access to the Internet.
The particular IP in your log is a web design/hosting service in Hungary.

Regards,

CrazyM

[Phant0m]

possible triggers for Windows Explorer requesting Internet or local network access

* opening a new browser window
* accessing bookmarks from Windows Explorer
* using Active Desktop
* browsing network neighborhood
* if your Windows Explorer is configured to view web content
* if your Windows Explorer is configured to launch folder windows in a separate process

:)

[BlitzenZeus]

To add what CrazyM said, here is the address it was trying to contact, which appears to also be a dns server.
ns1.huweb.hu [62.112.193.37]

Usually a reboot will fix this problem unless you have activated some part of the active desktop, or offline syncing of files.

[FireDancer]

Hi all,

Thanks for the replys. I did infact do a little more research and found that the sites you came up with are correct and I belive the site is part of a program/software I just installed caled Copy This Path. CamTech.net I belive and even looking a bit further it was when i was trying to read the help files that I might have clicked on the icon they have in the folder for web site support.

In as much as Windows Explorer accsessing the net I am not comfortable with anything getting out with out my expliced consent but wanted to check here and see if I might need to do a little more snooping around my puter.

I did infact do a reboot BlitzenZues and that did take care of problem.. Windows Explorer is no longer listening on 1035 or what ever it was at the time I dont quite remember... at any rate I am secure and safe thanks so much for the help with something new :) I will leave rule in place as I want to double check the icon I was speaking of and wnat to confirm this was the problem

Regards,
~FireDancer~

:)

[Peaches4U]

62.112.193.37 - this is the domain info. :-\

inetnum: 62.112.193.0 - 62.112.193.255
netname: ENTERNET
descr: Servers hosted by Enternet
country: HU
admin-c: ZH263-RIPE
tech-c: TAKI1-RIPE
status: ASSIGNED PA
notify: zsolt.hegedus@enternet.hu
mnt-by: ENTERNET-MNT
changed: sandor.takacs@enternet.hu 20001215
source: RIPE

route: 62.112.192.0/19
descr: ENTERNET
origin: AS15467
mnt-by: ENTERNET-MNT
changed: sandor.takacs@enternet.hu 20000821
source: RIPE

person: Zsolt Hegedus
address: EnterNet 2001 Kft.
address: Csango u. 8.
address: 1134 Budapest
address: HU
phone: +36 1 412 2001
fax-no: +36 1 412 2099
e-mail: zsolt.hegedus@enternet.hu
nic-hdl: ZH263-RIPE
notify: zsolt.hegedus@enternet.hu
changed: sandor.takacs@enternet.hu 20001010
source: RIPE

person: Sandor Takacs
address: Enternet 2001 Ltd.
address: Csango u. 8.
address: 1134 Budapest
address: Hungary
phone: +36 1 412 2001
fax-no: +36 1 412 2099
e-mail: sandor.takacs@enternet.hu
nic-hdl: TAKI1-RIPE
notify: sandor.takacs@enternet.hu
changed: sandor.takacs@enternet.hu 20001010
source: RIPE

[FireDancer]

Hi,

Ok I was wrong about one thing and that would be the IP address. I did learn though that if you click on a URl from with in a folder that would cause Windows Explorer to want a connection. The IP I gave you on the screen shot I am haveing trouble figureing out where it came from. The program I told you about that I was trying to read help file s on CamTech.net that I thought was the cause of this mystery has a compleatly differant IP of 216.205.146.156.


I am baffled as to why my computer wanted a connection to that particular IP of 62.112.193.37
as I have nothing in my puter pertaining to web design
or this name of ns1.huweb.hu. This is very strange but needless to say I did learn why Explorer wanted accsess... I created it by trying to open something in a folder other then my browser.

Thanks all and regards,
~FireDancer~ ::)

[Phant0m]

ns1.huweb.hu is Domain Name Service