Re: SMC Firewall detects Media Player Executable change

Tech-Archive recommends: Fix windows errors by optimizing your registry

The executable would only change after an upgrade to a new version, or if an update obtained from Microsoft changed the executable (no such updates to date to my knowledge.)

Note that a firewall will not prevent the installation of a virus or spyware downloaded by an application that you have granted internet access. That's not what a firewall does.

Therefore, you may presume that the streaming content you like to play is also streaming a virus or spyware to your computer. I noticed that you did not list an installed anti-spyware solution. Also: Keeping your filtering software up to date is critical, but so is configuring it for maximum protection.

Ted Zieglar

"Rob" <robreeve@***comcast.net> wrote in message news:B01D6F6C-02F7-4133-BC26-6BCECD21CE49@xxxxxxxxxxxxxxxx
Question - does the executable for Windows Media Player change by design as
it is being used, or is my player being infected by malware?

Several times, right after playing streaming content from the web, I've had
Sygate Personal Firewall trigger on an executable file change for WMP 10.

I've always removed and reloaded the player after each incident. Then I
reset the firewall application permission to key on the brand new executable
crc after the reload. Then it happens again after playing streaming content -
not always the first time, but very soon.

Each time there is no corresponding virus or spyware found - I look.

Background: XP Pro fully patched always, Media Player 10, Symantec AV
corporate 8.1 updated daily, sygate personal firewall V5.6 Build 2808,
windows firewall disabled..



.

Relevant Pages

  • Re: [opensuse] dictionary attacks
    ... On Jul 17, 2007, at 1:34 PM, Richard Creighton wrote: ... Patrick Shanahan wrote: ... the firewall to reload, takes a second. ...
    (SuSE)
  • Suspected Attack
    ... I am running W2k pro with Norton System Works AV (with ... Live Update) and a Sygate Personal Firewall (freeware ...
    (microsoft.public.win2000.security)
  • RE: security question
    ... Sygate Personal Firewall has an option to "Block all traffic while service ... can pry a PC wide open in the 30 second window between the network being ...
    (Security-Basics)
  • Re: IPFW question
    ... Since I reload the firewall rules remotely, I need the -q option on the ... how can I reload the whole thing? ... |> ipfw command is for creating and deleting individual rules. ... |> To unsubscribe, send any mail to ...
    (freebsd-questions)
  • Re: Are firewalls that good?
    ... I use sygate personal firewall pro and pest patrol. ... firehole.exe pest patrol popped up with a warning did I want to delete ...
    (microsoft.public.windowsxp.general)