Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[lalittle]

"JRThumb.exe" is asking for internet access from my firewall.  It's in the JR MC folder, but I just wanted to confirm that it's okay to give it access since I've never seen this before.

Thanks,

Larry

[DarkPenguin]

Neat.

Probably a direct show filter of some sort.  Quicktime maybe?

[Matt]

Sniff it.  We're curious.

[Hugo_Elbuho]

Same happened to me a couple of days ago.  Just blocked it...

I'll check the log and let you know.

[lalittle]

Sniff it.  We're curious.

How do I do that?

Are you saying that this is NOT your file, or that it should not be asking for internet access?

Thanks,

Larry

[JimH]

It's our file, but it doesn't use Internet access.  It's probably Quicktime or a Directx filter we call that wants it.

Try searching for ethereal as a sniffer.  Google or here.

[lalittle]

Here is some info from ZoneAlarm.  The address it refers to appear to be a DNS server from Road Runner.  I've only seen this a couple times in the past week or two, and in both cases it asked for access several times in a row.  I can't see any pattern to what triggers the attempted access, or why it only happens every several days.



OrgName:    Road Runner HoldCo LLC
OrgID:      RRWE
Address:    13241 Woodland Park Road
City:       Herndon
StateProv:  VA
PostalCode: 20171
Country:    US

ReferralServer: rwhois://ipmt.rr.com:4321

NetRange:   66.74.0.0 - 66.75.255.255
CIDR:       66.74.0.0/15
NetName:    RR-WEST-2BLK
NetHandle:  NET-66-74-0-0-1
Parent:     NET-66-0-0-0-0
NetType:    Direct Allocation
NameServer: DNS1.RR.COM
NameServer: DNS2.RR.COM
NameServer: DNS3.RR.COM
NameServer: DNS4.RR.COM
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    2001-01-30
Updated:    2003-02-11

RTechHandle: ZS30-ARIN
RTechName:   ServiceCo LLC
RTechPhone:  +1-703-345-3416
RTechEmail:  abuse@rr.com

OrgAbuseHandle: ABUSE10-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-703-345-3416
OrgAbuseEmail:  abuse@rr.com

OrgTechHandle: IPTEC-ARIN
OrgTechName:   IP Tech
OrgTechPhone:  +1-703-345-3416
OrgTechEmail:  abuse@rr.com

# ARIN WHOIS database, last updated 2006-06-06 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
 
 

[lalittle]

Sniff it.  We're curious.

Any word on the information I posted above?  I keep seeing this come up once in a while.

Thanks,

Larry