INTERACT FORUM

More => Old Versions => Media Center 12 (Development Ended) => Topic started by: lalittle on October 18, 2006, 03:47:12 pm

Title: Is it okay to give "JRThumb.exe" internet access?
Post by: lalittle on October 18, 2006, 03:47:12 pm
"JRThumb.exe" is asking for internet access from my firewall.  It's in the JR MC folder, but I just wanted to confirm that it's okay to give it access since I've never seen this before.

Thanks,

Larry
Title: Re: Is it okay to give "JRThumb.exe" internet access?
Post by: DarkPenguin on October 18, 2006, 03:53:45 pm
Neat.

Probably a direct show filter of some sort.  Quicktime maybe?
Title: Re: Is it okay to give "JRThumb.exe" internet access?
Post by: Matt on October 18, 2006, 03:58:09 pm
Sniff it.  We're curious.
Title: Re: Is it okay to give "JRThumb.exe" internet access?
Post by: Hugo_Elbuho on October 18, 2006, 05:44:14 pm
Same happened to me a couple of days ago.  Just blocked it...

I'll check the log and let you know.
Title: Re: Is it okay to give "JRThumb.exe" internet access?
Post by: lalittle on October 18, 2006, 07:02:46 pm
Quote from: Matt on October 18, 2006, 03:58:09 pm
Sniff it.  We're curious.

How do I do that?

Are you saying that this is NOT your file, or that it should not be asking for internet access?

Thanks,

Larry
Title: Re: Is it okay to give "JRThumb.exe" internet access?
Post by: JimH on October 18, 2006, 07:31:49 pm
It's our file, but it doesn't use Internet access.  It's probably Quicktime or a Directx filter we call that wants it.

Try searching for ethereal as a sniffer.  Google or here.
Title: Re: Is it okay to give "JRThumb.exe" internet access?
Post by: lalittle on October 26, 2006, 04:19:41 pm
Here is some info from ZoneAlarm.  The address it refers to appear to be a DNS server from Road Runner.  I've only seen this a couple times in the past week or two, and in both cases it asked for access several times in a row.  I can't see any pattern to what triggers the attempted access, or why it only happens every several days.



OrgName:    Road Runner HoldCo LLC
OrgID:      RRWE
Address:    13241 Woodland Park Road
City:       Herndon
StateProv:  VA
PostalCode: 20171
Country:    US

ReferralServer: rwhois://ipmt.rr.com:4321

NetRange:   66.74.0.0 - 66.75.255.255
CIDR:       66.74.0.0/15
NetName:    RR-WEST-2BLK
NetHandle:  NET-66-74-0-0-1
Parent:     NET-66-0-0-0-0
NetType:    Direct Allocation
NameServer: DNS1.RR.COM
NameServer: DNS2.RR.COM
NameServer: DNS3.RR.COM
NameServer: DNS4.RR.COM
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    2001-01-30
Updated:    2003-02-11

RTechHandle: ZS30-ARIN
RTechName:   ServiceCo LLC
RTechPhone:  +1-703-345-3416
RTechEmail:  abuse@rr.com

OrgAbuseHandle: ABUSE10-ARIN
OrgAbuseName:   Abuse
OrgAbusePhone:  +1-703-345-3416
OrgAbuseEmail:  abuse@rr.com

OrgTechHandle: IPTEC-ARIN
OrgTechName:   IP Tech
OrgTechPhone:  +1-703-345-3416
OrgTechEmail:  abuse@rr.com

# ARIN WHOIS database, last updated 2006-06-06 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
 
 
Title: Re: Is it okay to give "JRThumb.exe" internet access?
Post by: lalittle on October 30, 2006, 10:21:57 pm
Quote from: Matt on October 18, 2006, 03:58:09 pm
Sniff it.  We're curious.

Any word on the information I posted above?  I keep seeing this come up once in a while.

Thanks,

Larry