Authorization decisions

Being new to LNS, I expected some new prompts and the like, and when I booted up this machine a few minutes ago, I was greeted with one.

I selected authorize for "Just this session" (the only other option was "Just this time"), and the alert referrenced "spools" for system32 or something along those lines (sorry, should have made a note, was kinda sidetracked at the moment).

Just curious....but when greeted with an option like this, what is the best choice (session, time?), and if you're uncertain exactly what the alert is, but it does or seems to refer to part of the operating system....what is the best course of action?

And can you track and/or change what "decisions" you've made....if you made a bad one....and how do you go about doing that?

 

Actually, upon reboot.....I just encountered this same alert again:

Look 'n' Stop: Application Filtering

C:\WINDOWS\SYSTEM32\SPOOLSV.EXE

This software would like to connect to the internet.
Do you authorize it to connect?

_ Just this time _ Just for this session

Authorize / Block

Not a lot of description, and with only two "allow" options (both seemingly temporary - "session" and "this time"), looks like I could receive this alert every time I start up the PC!

Any suggestions on how to handle this one?

 

knowing its part of the OS (print spooler), i just allow it. but it also may not need internet access. maybe its looking for a network printer?? try just blocking for that session or if u receive more alerts, try blocking it and see what happens. also be careful, some malware disguises itself as spoolsv.exe, so look carefully at the directory.

 

I think you're right, Fuser, because I don't have a printer connected to this machine. And the one I did have connected to it previously has been shown the dumpster (LOL).

So, do you think that if a printer was connected, the alerts would stop? I'd certainly hope so, because being alerted upon every reboot (with no option to always allow) would drive me crazy after a while......

 

as long as u block or allow it, the prompts will stop

u do know that if u leave both Just this time and Just for this session unchecked, its the same as always allow/deny.

 

Nope, I didn't....thanks for the heads up.