What is trying to connect ?

Discussion in 'other firewalls' started by Yinda, Nov 30, 2002.

Thread Status:
Not open for further replies.
  1. Yinda

    Yinda Registered Member

    Joined:
    Nov 17, 2002
    Posts:
    78
    Hi,

    I am using W98. During normal startup, ZoneAlarm is the last application to be launched. Then I manually connect to Internet.

    From time to time, however, the connection screen appears just before ZA is started, asking 3 or 4 times (because I answer no) whether I want to connect to Internet.

    Is it possible to know what is trying to connect? According to msconfig, there is apparently no update program. Could it be ZA itself ?

    Thanks,

    Yinda
     
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    Hi Yinda,

    Not everything that starts up automatically is shown in msconfig. Please grab a copy of Startuplist from our download section (under monitoring) Unzip and run the program and copy and paste the results in your next post. If there is anything in there you don´t want the world to know about, you´re welcome to mail or IM it to me.

    Regards,

    Pieter
     
  3. Scotcov

    Scotcov Guest

    Yinda, check out this thread:
    http://www.wilderssecurity.com/showthread.php?t=3864
    after doing what Pieter suggested.
    ZA v.3.1.395 evidently does try to dial home on boot.
    Scotcov
     
  4. Yinda

    Yinda Registered Member

    Joined:
    Nov 17, 2002
    Posts:
    78
    Hi,

    I have just sent my startuplist to Pieter. As for ZA, I am still using 3.0 but maybe the issue was there too?

    Thanks a lot.

    Yinda
     
  5. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    Hi Yinda,

    I think I found it.
    Take a look here and scroll down to MSDTC and read the description in the last column. Unfortunately the link given there is no longer valid. This starts up from HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
    Other programs that might want to access the internet: Messenger, Reminder.lnk = C:\Utils\Reminder\Reminder.exe or WOOWATCH = C:\PROGRA~1\WANADOO\watch.exe
    Other then that you might want to get hijackthis and remove the DAP remnants from your browser.

    Hope this helps,

    Pieter
     
  6. Yinda

    Yinda Registered Member

    Joined:
    Nov 17, 2002
    Posts:
    78
    Hi Pieter,

    I have read the description of MSDTC (auto dials on startup). So it may be the responsible.

    Reminder is a small program which just displays a todo list. Wanadoo is my Internet provider o_O

    Thanks very much Pieter and to all of you. I always learn a lot on this forum.

    Yinda
     
  7. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    I think so. I guess there´s only one way to make sure.

    Then it´s probably not the one. I was thinking along the lines of little apps that remind you to register certain software.

    I have a thing against software provided by ISP´s. Call it bad experience ;)

    You´re very welcome and don´t we all.

    Regards,

    Pieter
     
  8. Yinda

    Yinda Registered Member

    Joined:
    Nov 17, 2002
    Posts:
    78
    According to
    http://www.answersthatwork.com/Tasklist_pages/tasklist_m.htm :

    2 or 3 years ago, I tried without success to install Microsoft's PWS. The line MSDTC was probably inserted at that moment.

    I'll uncheck it and see whether something will go wrong.

    Regards,

    Yinda
     
  9. Yinda

    Yinda Registered Member

    Joined:
    Nov 17, 2002
    Posts:
    78
    Hi,

    Just FYI.

    The connection attempts are due to ZAP 3.0 itself. I have read the DNS lookup explanation. But there is normally no upgrade request. The check ZA upgrade itself is manual.

    Allow the connection may not be the solution, because the ZA icon is not yet there, so maybe the firewall is not yet effective. If I block the connection, then there will be 10 or 11 attempts. The problem is relatively recent, but I don't know what has been changed.

    On the other hand, ZAP takes more than one minute to appear. So, yesterday, I decided to use Kerio. According to your firewall download page, it should not be too bad.

    BTW, there has no problem removing the MSDTC line in the startup.

    Regards,

    Yinda
     
  10. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    So scotcov was right :)
    He'll be pleased.
    So am I by the way, to see that you resolved it.

    Best regards,

    Pieter
     
Loading...
Thread Status:
Not open for further replies.