Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Mpcmdrun.exe


  • Please log in to reply
2 replies to this topic

#1 apached

apached

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:05:32 PM

Posted 04 September 2007 - 06:20 PM

Would really like to understand what causes applications to try to access the internet. What happens if access is denied.?
How can this be stopped? Do they maintain a log of every attempt ? Can the log be found and deleted?
Particularly annoying is every attempt to read a pdf file or opening an Excel file. and Windows Defender.
The destination IP's : 127.001 Port 1074, 64.4.52.57 HTTP, and 209.87.209.52DNS respectively.
I have been denying every request, but have not been able to work out what is the trigger for the Windows Defender application MpCmdRun.exe to startup.
Thanks,
apached

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,907 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:32 PM

Posted 05 September 2007 - 10:23 AM

MpCmdRun.exe is related to Defender's Command Line Utility and real-time monitoring component which is required for updating the program's signature definitions. MpCmdRun.exe scans for the availability of new signatures from the Microsoft site and then initiates the updating process as new ones become available. During the process MpCmdRun.exe will perform DNS queries to determine the exact IP address before connecting. In order to accomplish this task, the component must have frequent access to the Internet and thus, you may get an alert from your firewall.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 apached

apached
  • Topic Starter

  • Members
  • 81 posts
  • OFFLINE
  •  
  • Local time:05:32 PM

Posted 05 September 2007 - 05:01 PM

Hi,
I was concerned that the access requests were due to spyware activity. Have now allowed access. to mpcmdrun.exe. Should I also allow every attempt made by Adobe and Excel when pdf or excel files are opened? Why is it that the attempts are only detected by the firewall instead of the application directly communicating to the user the reason for getting connected.
apached




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users