Any reason for this to connect to the internet?

[Modular]

explorer.exe was trying to access the internet. I had just installed McAfee and disabled/uninstalled my Norton 2006. I was wondering why explorer.exe would need to access the net. I blocked it for now.

 

[wanderer27]

Maybe if you had mapped a Network Drive or were checking out Network neighbors. Other than that I can't really think of a reason for it to do this.

I've never really watched it though, so someone else may know of a reason for it to do this.

 

[V00D00]

Yes, there is a lot of reason to... if you have a virus.

Time to reformat!!

 

[JackMDS]

Originally posted by: V00D00Time to reformat!!

Why? It seems to me as a voodoo solution.

Modular

Check the files on you hard drive and make sure that you have the original windows explorer.exe, and Not the Virus version of W32.MyDoom.B.

If it is the original, block it and leave it alone. Make a mental note that you blocked it in case another application that uses the net invoke this behavior and stop working because of the blockage.

To be on the safe side Scan the system for Viruses and Spyware, check the StartUp ( <http://www.ezlan.net/infestation#startup> ) and running Processes ( <http://www.ezlan.net/infestation#process> ) to make sure that there is No unwanted application/junk running.

 

[Thor86]

That's file explorer trying to surf the web. File and Internet Explorers are tightly integrated, so if you just block this from connecting, it should be fine.

 

[Modular]

Jack,
I have been running Norton Internet Security and Antivirus since I bought the computer. Also I have Windows Defender installed and all security patches up to date. After I switched from Norton to McAfee I realized that Explorer.exe was accessing so I blocked it.

How do I go about checking the explorer files? Can I search for the W32.MyDoom.B file, or should I root through my C: drive manually. Also, is this virus something that a HighJackThis log would catch?

Edit: Upon reading this I'm quite sure I don't have this virus. I never open emails with from people I don't know, and especially attachments I wasn't expecting from someone. Also, I just ran a scan yesterday which came up with absolutely nothing.

But thanks for the advice voodoo

 

[JackMDS]

The main explorer.exe should be in C:\Windows

The SP2 size is 1,032,192 dated 8-04-04

If every thing else seems to be OK then do not worry so much, it legit that under certain occasions explorer.exe would try to get to the Internet.

Norton have this type of controls over secondary Modules (like explorer.exe), http://www.ezlan.net/example/

Might be that McAfee handles it differently and thus the sudden popups.

 

[Modular]

Thanks for the info on the file sizes. I'll check in a minute.

Originally posted by: JackMDS
If every thing else seems to be OK then do not worry so much

Haha, I'm prone to think of the worst case scenario initially in most situations. Then I work my way up from there. I guess the thing that gets me the most is that when I look at my routers security log and see hundreds of constant attacks that are being blocked, I can't help but believe that something must get through. I do most banking/billpay online and it creeps me out. So I'm always trying to make sure I'm secure.

Thanks again for the info.


Edit: Just checked and it is the proper size and date. Thanks Jack!

There were quite a few log files in there. Probably from updates and such.