Explorer.exe trying to access an IP address

[grrl]

I regularly get messages from my firewall saying Explorer.exe is trying to access an IP address. I always refuse and searched and found the address is located in the Netherlands. Why is this happening? Is someone trying to hack into my computer?

 

[mbackof]

Run virus scan with an updated .dat. You might have a virus or Trojan horse running. See if there are any wierd programs running in task manager. If you see anything with a lot of ~~ in it, it might be a trojan. Go to Norton or Mcafee's WWW sites and search on the .exe if you do. If it is a Trojan, it will come up there.

Mike

 

[martind1]

first off if its explorer.exe trying to reach an ip, its coming from the inside out so if you are being 'hacked' then it has already happened and something is trying to send out.

of course explorer.exe is essentially your windows (is that the best way to explain?).


why it is connecting to another computer? not sure, maybe its autoupdate, i am not sure.

look more into the ip, it could jsut be a mirror site for MS

 

[mikecel79]

I'm willing to bet you have hotbar or some other plug-in to Explorer that is trying to get out to the internet for an update or something.

 

[Torghn]

Sounds like a trojan to me. Most firewall by pass trojans inject them self in iexplorer.exe to get you to let them through the firewall, explorer.exe is a common backup if for some reason the trojan can't infect iexplorer.exe.

 

[martind1]

I highly doubt its a trojan. more likely a borwser type plugin like the aforementioned hotbar or whatnot

 

[sswingle]

You all are mixing up explorer.exe and iexplorer.exe

One is for windows (explorer), the other is for internet. (iexplorer)

I think it is normal for explorer to contact the internet, but not necessary

 

[Torghn]

Originally posted by: pwddesign
You all are mixing up explorer.exe and iexplorer.exe One is for windows (explorer), the other is for internet. (iexplorer) I think it is normal for explorer to contact the internet, but not necessary

It's definatly not normal for it to contact the Netherlands.:Q

 

[martind1]

Originally posted by: pwddesign
You all are mixing up explorer.exe and iexplorer.exe

One is for windows (explorer), the other is for internet. (iexplorer)

I think it is normal for explorer to contact the internet, but not necessary

actually:

of course explorer.exe is essentially your windows (is that the best way to explain

not all of us are mixing up explorer and iexplorer. i find it helpful to read the past posts before shooting off my mouth.


anyways. You have not provided us wiht information about this server in the netherlands. Like i said before it coudl be a mirror sight for a legit purpose(i.e. microsoft) which would make sense. I am not sure if it is explorer.exe that contacts for things like windows update, but if it is then your problem makes sense.


as I said before find more about the server it is trying to contact.

 

[buleyb]

Originally posted by: grrl
I regularly get messages from my firewall saying Explorer.exe is trying to access an IP address. I always refuse and searched and found the address is located in the Netherlands. Why is this happening? Is someone trying to hack into my computer?

Not that we don't trust you, but could you provide the IP so we can search? Also, where are you located (because suggestions about local proxies do make some sense...)

 

[martind1]

Originally posted by: buleyb

Originally posted by: grrl
I regularly get messages from my firewall saying Explorer.exe is trying to access an IP address. I always refuse and searched and found the address is located in the Netherlands. Why is this happening? Is someone trying to hack into my computer?

Not that we don't trust you, but could you provide the IP so we can search? Also, where are you located (because suggestions about local proxies do make some sense...)

yay, finally some more rational thought came along.