Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Should I Block These Programs?


  • Please log in to reply
5 replies to this topic

#1 dingdingding

dingdingding

  • Members
  • 103 posts
  • OFFLINE
  •  
  • Local time:05:33 PM

Posted 12 June 2007 - 11:50 PM

OS: Windows XP
Firewall: Sygate

*Even though this may appear to be a firewall question, I think that it is really an XP question* (?)

Problem: I have been messing with my firewall lately, and I don't know what I'm doing. I just tonight tripped over a list of stuff that my firewall is blocking from accessing the internet. Here is the list. Please tell me which programs are okay to access the internet, while preserving my online safety.

Huge Thanks in Advance.


Programs:

NDIS User Mode 1/0 Driver

MS DTC console program

WMI

TCP/IP Services Application

Services and Controller app

NT Kernal & System

Indexing Service filter daemon

Digital Line Detection

Content Index Service

Client Server Runtime Process

C:/Windows/System32/WINS.exe (I don't know how to make my little 'slash' lines face the other way).

C:/Windows/System32/Windows Media/NSUM.exe

C:/Windows/System32/Windows Media/NSPMON.exe

C:/Windows/System32/Windows Media/NSCM.exe

C:/Windows/System32/termsv.exe

C:/Windows/System32/snmp.exe

C:/Windows/System32/ntfrs.exe

C:/Windows/System32/mstask.exe

C:/Windows/System32/mqsvc.exe

C:/Windows/System32/lserver.exe

C:/Windows/System32/llssrv.exe

C:/Windows/System32/ismserv.exe

C:/Windows/System32/DNS.exe

C:/Windows/System32/dfssvc.exe

C:/Windows/System32/certsrv.exe

C:/daa457a4f73370af191f651294f08fcd/update/update.exe

Application Layer Gateway Service


I have googled a numer of these programs (?), but the advice just isn't consistent (one site says a program is fine, one site says that it should be blocked, etc).

Any help you all could give me would be greatly appreciated.

BC AdBot (Login to Remove)

 


#2 Nikas

Nikas

  • Members
  • 650 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Singapore
  • Local time:05:33 AM

Posted 13 June 2007 - 01:29 AM

Hi dingdingding and Welcome to BC!

I would suggest you to do the following first before you take the action for your firewall.

Preparation Guide For Use Before Posting A Hijackthis Log

As I suspect that there might be some malware in your PC. So do the preparation and post a Hijackthis log and wait for experts to help you. After you have been told that you are clean, then you may carry on to ask for suggestion for access to your firewall.

Cheers,
Nikas

#3 dingdingding

dingdingding
  • Topic Starter

  • Members
  • 103 posts
  • OFFLINE
  •  
  • Local time:05:33 PM

Posted 13 June 2007 - 01:57 AM

Nikas~

I'll follow all of the malware instructions and post a HJT log tomorrow (after the big server move). :thumbsup:

Thank you so much for your help. My poor ol' computer just hasn't been the same since I started messing with the firewall lol!

#4 Nikas

Nikas

  • Members
  • 650 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Singapore
  • Local time:05:33 AM

Posted 13 June 2007 - 02:14 AM

You're Welcome.

Hope that you will be clean from malware!

#5 usasma

usasma

    Still visually handicapped, new avatar (a camel) :0)


  • Members
  • 16,690 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:05:33 PM

Posted 13 June 2007 - 07:05 AM

Once the HJT team certifies you clean, post back and we'll go over the entries (and some tips on how to use the Sygate firewall).
- John
**If you need a more detailed explanation, please ask for it. I have the Knack. **

#6 dingdingding

dingdingding
  • Topic Starter

  • Members
  • 103 posts
  • OFFLINE
  •  
  • Local time:05:33 PM

Posted 13 June 2007 - 10:20 PM

Thank you tremendously. :thumbsup: I'll post my HJT log again and then we can go from there.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users