Guest BlairWitch Posted July 27, 2011 ID:458939 Share Posted July 27, 2011 Hello. When i go to my firefox download folder and want to install some program my ashampoo firewall gives a message that explorer.exe wants to access internet through port 80 usually to this ip address 199.7.48.190. Is this normal? Link to post Share on other sites More sharing options...
1PW Posted July 27, 2011 ID:458952 Share Posted July 27, 2011 Hello. When i go to my firefox download folder and want to install some program my ashampoo firewall gives a message that explorer.exe wants to access internet through port 80 usually to this ip address 199.7.48.190. Is this normal?The IP address belongs to VeriSign ( A Certificate Authority [CA])and might be related to a webpage whose URL begins "https"? Link to post Share on other sites More sharing options...
Guest BlairWitch Posted July 27, 2011 ID:458979 Share Posted July 27, 2011 The IP address belongs to VeriSign ( A Certificate Authority [CA])and might be related to a webpage whose URL begins "https"?So is that normal? Should i give explorer.exe internet access? I also have another problem rising pc doctor reports that i have two admin accounts in my computer but i dont have i only see one when i go to control panel and look at the user accounts. I allways run my computer from admin account thats the only account i have then there is the quest account but that is not in use. Link to post Share on other sites More sharing options...
Guest BlairWitch Posted July 27, 2011 ID:458980 Share Posted July 27, 2011 I received the firewall warning when i was installing iobit's advanced system care. Also when i was installing winamp explorer.exe wanted internet access. Link to post Share on other sites More sharing options...
1PW Posted July 27, 2011 ID:458981 Share Posted July 27, 2011 So is that normal? Should i give explorer.exe internet access? I also have another problem rising pc doctor reports that i have two admin accounts in my computer but i don't have i only see one when i go to control panel and look at the user accounts. I always run my computer from admin account that's the only account i have then there is the quest account but that is not in use.If the login name you use is not administrator and you have administrator privileges, then your answer is you and the administrator or the two privileged accounts.BTW, it's not recommended to routinely use a privileged account for everyday tasks. A "user" account is sufficient for everyday work.HTH Link to post Share on other sites More sharing options...
Guest BlairWitch Posted July 27, 2011 ID:459056 Share Posted July 27, 2011 I just installed winamp and during the install the ashampoo firewall stated that rundll32.exe wants to access the internet through port 80. These were the ip addressess that it wanted to access... 202.232.180.209 that ip seems to be in Japan http://www.ip-adress.com/whois/202.232.180.209and 72.21.211.188 this seems to be in united states and belongs to amazon.com.I also scanned the rundll32.dll in virustotal and it was not detected by any of the scanners but in additional information it says Warning: Possibly corrupt Version resource... This is the finnish version of the windows xp home operating system. Link to post Share on other sites More sharing options...
1PW Posted July 27, 2011 ID:459169 Share Posted July 27, 2011 I just installed Winamp and during the install the Ashampoo firewall stated that rundll32.exe wants to access the internet through port 80. These were the ip addresses that it wanted to access... 202.232.180.209 that ip seems to be in Japan http://www.ip-adress.com/whois/202.232.180.209and 72.21.211.188 this seems to be in united states and belongs to amazon.com.The 202.232.180.209 IP address is unresponsive and seemed to pose no threat via an abbreviated check. The 72.21.211.188 IP address also seems non-malevolent and might be ad-ware related to your freeware install of the Winamp media player. I also scanned the rundll32.dll in VirusTotal and it was not detected by any of the scanners but in additional information it says Warning: Possibly corrupt Version resource... This is the Finnish version of the windows XP home operating system.Please resubmit the rundll32.dll to VirusTotal again. After VT has run its analysis, please copy/paste the results URL into a reply to this topic.At this point, all seems innocent and none of the above should indicate malware infiltration.HTH Link to post Share on other sites More sharing options...
Guest BlairWitch Posted July 28, 2011 ID:459273 Share Posted July 28, 2011 Here are the virustotal results http://www.virustotal.com/file-scan/report.html?id=155c281db14e293a8688a32a2bda82822e5f7fbf673301e06868da7d2a9876d9-1311836673 Link to post Share on other sites More sharing options...
1PW Posted July 28, 2011 ID:459275 Share Posted July 28, 2011 Here are the virustotal results http://www.virustotal.com/file-scan/report.html?id=155c281db14e293a8688a32a2bda82822e5f7fbf673301e06868da7d2a9876d9-1311836673IMHO You have no problem there. Please let us know if we can help you again. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now