Installed and seems to be running fine here, Vista Home Premium SP2 64bit.
You might want to check the following post in regards to ephemeral ports. They have changed in Vista and W7....
Did you check you outbound logs to see if you had a connection to that remote IP at the time of the alert?
Protocol type ESP - Encapsulating Security Payload
Microsoft Security Advisory ( 2286198 )
Vulnerability in Windows Shell Could Allow Remote Code Execution
Published: July 16, 2010...
While I cannot do it with Vista, it would look like this:
Not having Windows 7 I was simply asking if the Windows 7 firewall permits entering port ranges in the ports and protocols properties. ie. you...
As the link in Seer's post mentions "The new default start port is 49152, and the default end port is 65535."
Does the Windows 7 firewall allow...
One thing to be aware of is that the Process Monitor component is disabled in 64 bit environments.
The other firewalls will be recording events like this in the logs and not bothering users with nuisance pop-up alerts everytime it drops a packet...
It is normal to see firewalls drop late packets from legitimate connections in addition to scans and other unsolicited traffic. You just do not...
The term "blocked" can be confusing if all the firewall is doing is dropping packets it has determined are no longer part of a valid session. If...
‘Twas the night before Christmas all through cyberspace
Not a script kiddy was stirring, just the worms keeping pace
The computers had all been...
The following link should explain it:
"Closed" is not bad.
In order for a port to be open on your system, a service or application has to be actively listening on...
Just in case you did not know:
Downloads and info should still be available:...
From your screenshot it looks like the url for the pop up was z1.adserver.com
You might want to check under config > blockfile and...
It is perfectly normal for IEXPLORE.EXE (given the file path from your previous post) along with explorer.exe to show in Task Manager.
Is it possible your licence has expired? Without a current user name and password it will not update.
Separate names with a comma.