IMPORTANT: Is it Trojan, virus or something else?

[rmd2001]

OK, security gurus:
Fresh install WinMe. Immediately installed Norton Internet Firewall(have cable conn).
On each reboot I get this:

Windows Explorer is trying to access the Internet.
Remote Service: Outbound UDP on port 1900
Remote Address: 239.255.255.250

It attempts above three times.
Then next

Windows Explorer is trying to access the Internet.
Remote Service: inbound UDP on port 1025
Remote Address: localhost (127.0.0.1)

Then this:

SSDPSRV.EXE is trying access SSDP Service on WinMe
Local Service: Inbound UDP on port 1900
Remote address: RMD (24.190.171.15)

Is it something I should worry and block all attempts?. Please explain what all those messages are.

Thanks.

 

[Techwhore]

Sometimes programs need to access the internet for reasons i can't explain. I don't know about the first and last message, but the second maessage is a local loopback, so i can't see how that would be dangerous. The best practice is to always block such events until you notice a lack of functionality on your machine. You may find that you need to grant access in order to do something. Seeing as how it's a fresh install and you said you put the firewall up ASAP, i think you're ok.

 

[Kewlb]

would seem to all look like normal windows functionality

here is what SSDP is:

Provides Simple Service Discovery Protocol (SSDP) and General Event Notification Architecture (GENA) services for Universal Plug and Play functionality.

however you can never be too carefull.. its your call. I would block it and if you start to experience problems, then I would allow it.

 

[rmd2001]

Thanks. I'll block it.