Stange Thing.. Windows Explorer asking for Connection

Discussion in 'other firewalls' started by FireDancer, Sep 15, 2003.

Thread Status:
Not open for further replies.
  1. FireDancer

    FireDancer Registered Member

    Joined:
    Jul 24, 2003
    Posts:
    316
    Hi all,

    The other day I was onlince and got a prompt that Windows Explorer wanted to connect to the net.
    In my haste and haveing my attention directed else
    where at the time I looked very breifly and told Kerio to deny it. Like I said in my haste I did not read where or what it was wanting to connect to.

    I have made a rule to block Win Explorer TCP out any/any
    for now. I am wondering in what instances would Windows Explorer want /need to connect to the net?

    Regards,
    FireDancer
     

    Attached Files:

  2. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    Hi FireDancer

    Windows Explorer is just as Internet capable as Internet Explorer.
    Without knowing exactly what you were doing at the time, we could only speculate as to how and why Explorer accessed the file with the link.

    There is no problem with blocking Explorer access to the Internet.
    The particular IP in your log is a web design/hosting service in Hungary.

    Regards,

    CrazyM
     
  3. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,684
    Location:
    Canada
    possible triggers for Windows Explorer requesting Internet or local network access

    * opening a new browser window
    * accessing bookmarks from Windows Explorer
    * using Active Desktop
    * browsing network neighborhood
    * if your Windows Explorer is configured to view web content
    * if your Windows Explorer is configured to launch folder windows in a separate process

    :)
     
  4. BlitzenZeus

    BlitzenZeus Security Expert

    Joined:
    Feb 11, 2002
    Posts:
    451
    Location:
    Oregon, USA
    To add what CrazyM said, here is the address it was trying to contact, which appears to also be a dns server.
    ns1.huweb.hu [62.112.193.37]

    Usually a reboot will fix this problem unless you have activated some part of the active desktop, or offline syncing of files.
     
  5. FireDancer

    FireDancer Registered Member

    Joined:
    Jul 24, 2003
    Posts:
    316
    Hi all,

    Thanks for the replys. I did infact do a little more research and found that the sites you came up with are correct and I belive the site is part of a program/software I just installed caled Copy This Path. CamTech.net I belive and even looking a bit further it was when i was trying to read the help files that I might have clicked on the icon they have in the folder for web site support.

    In as much as Windows Explorer accsessing the net I am not comfortable with anything getting out with out my expliced consent but wanted to check here and see if I might need to do a little more snooping around my puter.

    I did infact do a reboot BlitzenZues and that did take care of problem.. Windows Explorer is no longer listening on 1035 or what ever it was at the time I dont quite remember... at any rate I am secure and safe thanks so much for the help with something new :) I will leave rule in place as I want to double check the icon I was speaking of and wnat to confirm this was the problem

    Regards,
    ~FireDancer~

    :)
     
  6. Peaches4U

    Peaches4U Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    5,070
    Location:
    At my computer
    62.112.193.37 - this is the domain info. :doubt:

    inetnum: 62.112.193.0 - 62.112.193.255
    netname: ENTERNET
    descr: Servers hosted by Enternet
    country: HU
    admin-c: ZH263-RIPE
    tech-c: TAKI1-RIPE
    status: ASSIGNED PA
    notify: zsolt.hegedus@enternet.hu
    mnt-by: ENTERNET-MNT
    changed: sandor.takacs@enternet.hu 20001215
    source: RIPE

    route: 62.112.192.0/19
    descr: ENTERNET
    origin: AS15467
    mnt-by: ENTERNET-MNT
    changed: sandor.takacs@enternet.hu 20000821
    source: RIPE

    person: Zsolt Hegedus
    address: EnterNet 2001 Kft.
    address: Csango u. 8.
    address: 1134 Budapest
    address: HU
    phone: +36 1 412 2001
    fax-no: +36 1 412 2099
    e-mail: zsolt.hegedus@enternet.hu
    nic-hdl: ZH263-RIPE
    notify: zsolt.hegedus@enternet.hu
    changed: sandor.takacs@enternet.hu 20001010
    source: RIPE

    person: Sandor Takacs
    address: Enternet 2001 Ltd.
    address: Csango u. 8.
    address: 1134 Budapest
    address: Hungary
    phone: +36 1 412 2001
    fax-no: +36 1 412 2099
    e-mail: sandor.takacs@enternet.hu
    nic-hdl: TAKI1-RIPE
    notify: sandor.takacs@enternet.hu
    changed: sandor.takacs@enternet.hu 20001010
    source: RIPE
     
  7. FireDancer

    FireDancer Registered Member

    Joined:
    Jul 24, 2003
    Posts:
    316
    Hi,

    Ok I was wrong about one thing and that would be the IP address. I did learn though that if you click on a URl from with in a folder that would cause Windows Explorer to want a connection. The IP I gave you on the screen shot I am haveing trouble figureing out where it came from. The program I told you about that I was trying to read help file s on CamTech.net that I thought was the cause of this mystery has a compleatly differant IP of 216.205.146.156.


    I am baffled as to why my computer wanted a connection to that particular IP of 62.112.193.37
    as I have nothing in my puter pertaining to web design
    or this name of ns1.huweb.hu. This is very strange but needless to say I did learn why Explorer wanted accsess... I created it by trying to open something in a folder other then my browser.

    Thanks all and regards,
    ~FireDancer~ :rolleyes:
     
  8. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,684
    Location:
    Canada
    ns1.huweb.hu is Domain Name Service
     
Loading...
Thread Status:
Not open for further replies.