monitoring background internet access

  • Thread starter Thread starter Jeff
  • Start date Start date
J

Jeff

My PC runs XP with all the latest critical updates. I have it set to
notify me when Windows updates are available but to let me install them
manually.

I recently installed the 2007 version of TurboTax and as part of its
installation it installed "Microsoft .NET Framework version 2". The
next day, I got an automatic alert from Microsoft that a security update
for Microsoft .NET Framework version 2 was available for download.

I actually appreciate that convenience and added safety of that alert,
but what concerns me is that obviously Microsoft was made aware of what
is installed on my PC and that a connection was therefore made in the
background between my PC and Microsoft without my being alerted that it
was taking place. My PC is on a wireless home network behind a router
and I also use Zone Alarm's firewall for added protection. I realize
that certain background connections are allowed but is there a way to be
alerted when they actually happen so I get a feel for what is actually
happening!?

I also wonder how often these connections happen and what effect they
might have in slowing down my PC?

Thanks.

Jeff
 
..... and that a connection was therefore made in the
background between my PC and Microsoft without my being alerted that it
was taking place.
Surprise...

My PC is on a wireless home network behind a router
and I also use Zone Alarm's firewall for added protection.
Click to expand...

Exactly what added protection does ZA give you? A warm feeling of
being secure?
I realize that certain background connections are allowed but is there a way to be
alerted when they actually happen so I get a feel for what is actually
happening!?
Click to expand...

No. As has been mentioned several times, outbound control on a windows
machine is not reliable. Furthermore, your OS is the highest authority
on your machine. If it wants to make outbound connections without
being controlled by a piece of PFW illusionware, it can do so. If you
don't trust MS, don't use windows. Otherwise, live with it.
I also wonder how often these connections happen
Click to expand...

Install a packet sniffer on your network.
and what effect they might have in slowing down my PC?
Click to expand...

probably not enough to worry about.
 
My PC is on a wireless home network behind a router and I also use
Zone Alarm's firewall for added protection. I realize that certain
background connections are allowed but is there a way to be
alerted when they actually happen so I get a feel for what is
actually happening!?
Click to expand...

I don't know Zone Alarm, but can you not look at it's logs to make
make sure what component made the unwanted connection, and then
create a rule that disallows it from happening again? I can do that
with Sygate, and I would think that most firewalls could, too.
 
I don't know Zone Alarm, but can you not look at it's logs to make
make sure what component made the unwanted connection, and then
create a rule that disallows it from happening again? I can do that
with Sygate, and I would think that most firewalls could, too.
Click to expand...

1. Neither ZA nor SyGate are firewalls. They are host based packet
filters with added bells and whistles.

2. Your SyGate thingie adds vulnerabilities to your system by being
technically bad designed. For example it opens windows from a service
running with system privileges.
 
What's a packet sniffer and where do I get one?
Click to expand...

Go google.

However, it requires a good understanding of networking, so it might
be a good idea to initially install one just for educational purposes.

If you want to get really serious about what "phones home" without
your knowledge you'll have to eventually run a sniffer on a separate
machine on your network.
 
Jeff said:
My PC runs XP with all the latest critical updates. I have it set to
notify me when Windows updates are available but to let me install them
manually.

I recently installed the 2007 version of TurboTax and as part of its
installation it installed "Microsoft .NET Framework version 2". The
next day, I got an automatic alert from Microsoft that a security update
for Microsoft .NET Framework version 2 was available for download.

I actually appreciate that convenience and added safety of that alert,
but what concerns me is that obviously Microsoft was made aware of what
is installed on my PC and that a connection was therefore made in the
background between my PC and Microsoft without my being alerted that it
was taking place. My PC is on a wireless home network behind a router
and I also use Zone Alarm's firewall for added protection. I realize
that certain background connections are allowed but is there a way to be
alerted when they actually happen so I get a feel for what is actually
happening!?

I also wonder how often these connections happen and what effect they
might have in slowing down my PC?

Thanks.

Jeff
Click to expand...
"I have it set to notify me when Windows updates are available but to let
me install them manually."
Imagine you are a programmer - how are you going to implement this without
calling Microsoft Central and saying 'I have the following components
installed'?

Simple cure - disable automatic and check for updates manually. Same info
will be sent to the same place, but not behind your back.

But do not skip the updates or you will eventually be hijacked.
 
Jeff said:
What's a packet sniffer and where do I get one?

Jeff
Click to expand...
The standard is Wireshark. I'd get a book STRONG on protocols to go
along with it. I use the Stevens book, but there are also other good ones.
 
1. Neither ZA nor SyGate are firewalls. They are host based packet
filters with added bells and whistles.
Whatever.

2. Your SyGate thingie adds vulnerabilities to your system by being
technically bad designed. For example it opens windows from a service
running with system privileges.
Click to expand...

I'm not worried about it.
 
Back
Top