 Mpcmdrun.exe, Applications that need to Access the internet. |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.  |
 Sep 4 2007, 06:20 PM
Post
#1
|
|
|
New Member  Group: Members Posts: 12 Joined: 29-December 06 Member No.: 103,449  |
How can this be stopped? Do they maintain a log of every attempt ? Can the log be found and deleted? Particularly annoying is every attempt to read a pdf file or opening an Excel file. and Windows Defender. The destination IP's : 127.001 Port 1074, 64.4.52.57 HTTP, and 209.87.209.52DNS respectively. I have been denying every request, but have not been able to work out what is the trigger for the Windows Defender application MpCmdRun.exe to startup. Thanks, apached |
 |
 
|
|
Sep 5 2007, 10:23 AM
Post
#2
|
|
 Bleepin' Janitor Group: Global Moderator Posts: 12,551 Joined: 9-July 05 From: Virginia, USA Member No.: 26,513 |
MpCmdRun.exe is related to Defender's Command Line Utility and real-time monitoring component which is required for updating the program's signature definitions. MpCmdRun.exe scans for the availability of new signatures from the Microsoft site and then initiates the updating process as new ones become available. During the process MpCmdRun.exe will perform DNS queries to determine the exact IP address before connecting. In order to accomplish this task, the component must have frequent access to the Internet and thus, you may get an alert from your firewall.
-------------------- "THE BAD GUYS DON'T NEED A SEARCH WARRANT. ARE YOU PROTECTED?"
Microsoft MVP - Windows Security 2007-2008  |
|
|
|
|
Sep 5 2007, 05:01 PM
Post
#3
|
|
|
New Member Group: Members Posts: 12 Joined: 29-December 06 Member No.: 103,449 |
Hi,
I was concerned that the access requests were due to spyware activity. Have now allowed access. to mpcmdrun.exe. Should I also allow every attempt made by Adobe and Excel when pdf or excel files are opened? Why is it that the attempts are only detected by the firewall instead of the application directly communicating to the user the reason for getting connected. apached |
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 7th September 2008 - 06:47 PM |
© 2003-2008 All Rights Reserved Bleeping Computer LLC.