Why would Windows Explorer try to access the net?

[JETninja]

WinXP Pro SP1+.....since getting many of the Critical Updates to it last week (thanks to help in here, Win Update has not worked the last month or two till now) I know get a message everytime I boot into Windows from Zonealarm that Windows Explorer wants to access the Internet. Last night I gave it a permanant "no" so it would log into ZA, then verified it is Windows Explorer (verified the path)

Why is it doing this, and can I turn it off?

Thanks!

 

[dawks]

One thing I can think of, is when you click on an HTML file... It loads the page into the preview pane.. Which would require it to access the internet..

 

[JETninja]

No, it's happening before I start up any program....blank desktop....up comes the ZA request.....

 

[bozo1]

Sounds like Windows Update checking to see if there are any updates available.

Turn off the automatic update feature and see if the problem goes away.

 

[bsobel]

Originally posted by: JETninja
WinXP Pro SP1+.....since getting many of the Critical Updates to it last week (thanks to help in here, Win Update has not worked the last month or two till now) I know get a message everytime I boot into Windows from Zonealarm that Windows Explorer wants to access the Internet. Last night I gave it a permanant "no" so it would log into ZA, then verified it is Windows Explorer (verified the path)

What address is it attempting to connect to?
Bill

 

[NogginBoink]

Originally posted by: bozo1
Sounds like Windows Update checking to see if there are any updates available.

Turn off the automatic update feature and see if the problem goes away.

And get infected with the next worm, instead.

Did you determine what website Windows Explorer is trying to access? That might tell you why it's going out there.

Shell extensions might also do this, but I can't fathom why they would.

 

[JETninja]

Auto Update has never been on.....How do I find out what site it is trying to access?

Thanks!

 

[bacillus]

I seem to recall that an earlier version of ZA did this but was fixed in later versions!

 

[RVN]

Which version of Zone Alarm are you using?

 

[spyordie007]

Originally posted by: JETninja
No, it's happening before I start up any program....blank desktop....up comes the ZA request.....

it could be active desktop, do you have any web content set on your desktop?

 

[JETninja]

I don't think I have a active desktop, will verify. Running last freeware ZA version...3.xxx or something. (4.0 not in Freeware yet I think...)

 

[doan]

It might be the automatic clock sync feature

 

[bjc112]

What address is it attempting to connect to?

 

[JETninja]

Why would the clock use WE?

It is attempting to connect to 127.0.0.1 Port 159

Application: explorer.exe


No active desktop either....

 

[leolaw]

well, dont like Windows Explorer? Use LINUX !!!!

 

[JETninja]

Ok..great idea...port over my Racing, WWII, and Flight Sims....my Windows programs I like, etc.....

Great suggestion! NOT! I'll leave Linux for a Firewall box or running tool and aircraft applications. Not my Family boxs.

Any other helpful information? LOL!

 

[Hamilton]

Originally posted by: JETninja
Why would the clock use WE?

It is attempting to connect to 127.0.0.1 Port 159

Application: explorer.exe


No active desktop either....

127.0.0.1=localhost

 

[NogginBoink]

Originally posted by: JETninja
Why would the clock use WE?

It is attempting to connect to 127.0.0.1 Port 159

Application: explorer.exe


No active desktop either....

127.0.0.1 is the loopback address. So explorer is trying to contact your own computer using networking, which really isn't as odd as it sounds.

Port 159 is unusual. A list of well known ports shows that port 159 is used for "NSS-Routing." I have no idea what that means and haven't found any additional details.

Sounds like a client/server thing on your own machine. Did you recently add/change any software?

 

[Staver]

WinXP Pro SP1+.....since getting many of the Critical Updates to it last week (thanks to help in here, Win Update has not worked the last month or two till now) I know get a message everytime I boot into Windows from Zonealarm that Windows Explorer wants to access the Internet. Last night I gave it a permanant "no" so it would log into ZA, then verified it is Windows Explorer (verified the path)

I remember back in Win98 that the spyware Comet Cursor used explorer.exe to send secret files to their server. Go get AD-Aware and Spy-Bot destroyer so you can be sure.

 

[AnMig]

did you find out why XP is doing this?


Like you after doing a recent windows update my computer now tries to open up my dial up connection (modem)
every time I open a "windows explorer" or "my computer"

I tried disabling "synchronize" ,ran adaware, ran AVG scan. But still get the same problem.
It tries to open up my dial up connection when I open "windows explorer"



Ideas anyone?