Does MSAS watch on NetBios ?

  • Thread starter Thread starter Jacques
  • Start date Start date
J

Jacques

On my XP-home, I always have outgoing Netbios traffic (blocked and recorded
by my FW). There are very few adresses.

I want to know what can be the process which is trying to open that
connection. How can MSAS help me as I think it could be another way a spy
can export its data.
 
Jacques said:
On my XP-home, I always have outgoing Netbios traffic (blocked and recorded
by my FW). There are very few adresses.

I want to know what can be the process which is trying to open that
connection. How can MSAS help me as I think it could be another way a spy
can export its data.
Click to expand...

Hi

MSAS cant help you with this until it is detected as spyware.
This is also a problem if you are running SP2s built in
firewall wich
don´t stop this outgoing traffic. (It is more important to
call "Mum" )

You can get a hint from System explorer/running processes that a
unknown process is up. So maybe a better alarm function
about running
processes can be one way. As I understand it every new
process should give
a allow/block message or ? But this can be missed or wrong
allowed.
 
You can use some of the tools Plun has recommended--TCPView, for example.

This really is the functionality of a firewall--Microsoft Antispyware can't
do everything.

As Plun mentions, the Windows firewall doesn't do the job of alerting you to
all outbound traffic. I don't agree with him about the reason this is true,
however. The fact is that they've left this to third-party firewall
vendors, and there are plenty of links to these at:

http://www.microsoft.com/protect
 
I was saying the same thing my self since Windows Firewall monitors what
comes through Port 80.
 
I agree, BUT, the firewall only shows network layer. Filtering SVCHOST and
Netbios must be run by something else located inside the OS.
I dont find any utility where I can trap calls to \\other_comp\file.
Perhaps a sister to MSAS after this very usefull one is released?
 
Back
Top