Now getting TWO alerts from ZA when I open my browser

Now getting TWO alerts from ZA when I open my browser

Secure Home | Search | About
 Networking Firewalls    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Now getting TWO alerts from ZA when I open my browser JimNSB 01-14-2006
Posted by JimNSB on January 14, 2006, 10:42 am
If you were  Registered and logged in, you could reply and use other advanced thread options
After I updated to ZA v6.1.737.000 a couple weeks ago, I now get *two*
alert-boxes when I launch my browser (Firefox 0.9.3). The first box
opens before the browser appears (which is what has always occurred
previously), but now a second alert-box opens before the default page
displays. The IP destination of the first alert-box is 127.0.0.1:port
xxxx (xxxx varies; usually in the 1200-1300 range); the destination IP
of the second alert-box is that of my DNS-server (I'm on RoadRunner).
Both alert-boxes report that the program requesting access is
firefox.exe, and when I thought more about that I've become suspicious
that something 'fishy' might be going on.

When I updated to this latest version of ZA, I simply 'carried over'
my old program-control settings (as I always do), so the appearance of
this second alert-box concerns me. I initially assumed that this new
version added an additional 'scan' that the older versions did not
perform, but now I'm wondering if my browser might have picked up a
'hitch-hiker' program that is launching concurrently with it. I ran
Ad-aware and SpyBot, but they did not report any malware, and a full
virus scan (AVG Free) came back clean. I read all the posts here for
the last few days and saw no mention of anyone seeing similar behavior
from this ZA release.

(OS= Win98SE)

Does it sound like I have a problem?

TIA

Posted by Volker Birk on January 14, 2006, 11:31 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> After I updated to ZA v6.1.737.000 a couple weeks ago, I now get *two*
> alert-boxes when I launch my browser (Firefox 0.9.3).
[...]
> (OS= Win98SE)
> Does it sound like I have a problem?

Yes.

Your Browser is much too old, and has big security problems. You should
update immediately.

You don't need Zone Alarm at all. With Windows 98, it is enough to
unbind anything from the external network interface with the exception
of the Internet protocol familiy / TCP/IP.

Yours,
VB.
--
maximum inquementum tum biguttam egresso scribe. meo maximo vestibulo
perlegamentum da. da duo tum maximum conscribementa meis listis. dum listis
decapitamentum damentum nexto fac sic nextum tum novumversum scribe egresso.
lista sic hoc recidementum nextum cis vannementa da listis. cis.

Posted by Jeff B on January 15, 2006, 6:15 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
JimNSB wrote:
> After I updated to ZA v6.1.737.000 a couple weeks ago, I now get *two*
> alert-boxes when I launch my browser (Firefox 0.9.3). The first box
> opens before the browser appears (which is what has always occurred
> previously), but now a second alert-box opens before the default page
> displays. The IP destination of the first alert-box is 127.0.0.1:port
> xxxx (xxxx varies; usually in the 1200-1300 range); the destination IP
> of the second alert-box is that of my DNS-server (I'm on RoadRunner).
> Both alert-boxes report that the program requesting access is
> firefox.exe, and when I thought more about that I've become suspicious
> that something 'fishy' might be going on.

127.0.0.1:* are always the local machine and MS uses these for all kinds
of stuff. If you look carefully, you will see that a proxy is typically
setting here as a filter to your email (in+out) and may be also a filter
to your browser as well.

go to www.nirsoft.net/ and lookup cports. when run with admin
authority, you can see and learn alot about proxies.
hint: your-email-client---proxy----your-isp-services
eg: outlook-express:1200----ccApp.exe:1200 -- isp-address:110
outlook is accessing the proxy ccApp.exe (norton) which is accessing
the isp:110 (pop3) mailbox

so, is 127.0.0.1:1200 a problem? find out what OTHER port that program
has open and chase it back to the IP address it is accessing


--
---
Jeff B (remove the No-Spam to reply)

Similar ThreadsPosted
Browser hijack or misdirect - Please Help! March 5, 2005, 3:38 pm
i am unable to connect yahoo & msn messenger but can browse the websites through browser April 7, 2006, 3:05 pm
Kerio 4.3 alerts January 14, 2007, 1:22 pm
Zone Alarm Alerts September 4, 2005, 1:33 am
Strange ZoneAlarm Alerts July 4, 2006, 7:16 pm
Norton Personal Firewall Alerts December 16, 2004, 6:16 pm
Norton Internet Security Alerts November 28, 2005, 7:32 am
Norton Internet Security Alerts November 28, 2005, 7:35 am
interesting alerts on Zonealarm recently - what do I do? November 27, 2006, 7:26 pm
Norton Internet Security Intrusion Detection Alerts November 10, 2005, 8:14 pm

The site map in XML format XML site map

Contact Us | Privacy Policy