Sign in with
Sign up | Sign in
Your question
Closed

Netsession_win

Last response: in Windows XP
Share
October 27, 2011 7:34:02 PM

Hello,i am Josh,

i am currently using window xp professional and was wondering about this program that windows firewall blocked. A message popped up saying the name of the program "netsession_win" and it says unknown publisher and this is the first time i've ever seen this. I was wondering if i should block or or unblock it and is it part of anything that is important? and is it a malware or virus that takes my info if i unblock it?

thanks in advance

More about : netsession win

a b 8 Security
October 27, 2011 7:48:41 PM

moneyonone said:
Hello,i am Josh,

i am currently using window xp professional and was wondering about this program that windows firewall blocked. A message popped up saying the name of the program "netsession_win" and it says unknown publisher and this is the first time i've ever seen this. I was wondering if i should block or or unblock it and is it part of anything that is important? and is it a malware or virus that takes my info if i unblock it?

thanks in advance



http://forum.sysinternals.com/am-i-chasing-shadows_topi...
Score
0
October 28, 2011 7:23:49 PM

ksiemb, thanks for the reply but about the unknown publisher, it should of said akamai right? i dont know if this is a fake netsession_win or not because the publisher is unknown and it keeps asking for internet connection
Score
0
Related resources
a b 8 Security
October 28, 2011 8:22:09 PM

moneyonone said:
ksiemb, thanks for the reply but about the unknown publisher, it should of said akamai right? i dont know if this is a fake netsession_win or not because the publisher is unknown and it keeps asking for internet connection



Sorry, don't know about the publisher, as to who it would be. At the bottom of that post, he had to link to experts-exchange where he said he posted his solution, but I could not get to the site. Did you read it, by chance ?

Are you getting blocks to same IP addresses his listed ?
Score
0
October 29, 2011 9:04:08 PM

yes i did read but i do not know how to get the ip and find out what it is asking for, and same i cannot access the website that he posted at the bottom
Score
0
a b 8 Security
October 29, 2011 10:08:50 PM

moneyonone said:
yes i did read but i do not know how to get the ip and find out what it is asking for, and same i cannot access the website that he posted at the bottom


He used a utility TCPVIEW. Here is his post:

Using TCPView I noticed a svchost.exe process with a continually open http connection to an IP address of 77.67.10.143
As I didn't recognise the destination, I closed the connection, it sprang back open again, this time to 77.67.10.149 - rinse and repeat as many times as you like and the connection rotates around 8 or 10 addresses in the 77.67.10.1xx range.


Here is a comparable viewer
http://www.dodownload.com/internet+network/net+scan/365...

PS: I left a msg about his bad link, but doubt that he will ever return to that forum !
Score
0

Best solution

a b 8 Security
October 30, 2011 4:24:44 AM

moneyonone said:
yes i did read but i do not know how to get the ip and find out what it is asking for, and same i cannot access the website that he posted at the bottom



Josh: The Originator of that post on sysinternals, did return, and post his solution that he had posted on experts-exchange. Guess one has to be a member, and that is why the link was not avail to you and I. Here is the thread again.

http://forum.sysinternals.com/topic25171_post131523.htm...

He describes it pretty well, and has come to the conclusion that, at least, he can live without it. He also posted another informational link in his response. Hope this doesn't "Muddy the Water !

Ken
Share
October 30, 2011 1:58:30 PM

thank you very much ksiemb for helping me with this, i will enable it to access internet since i watch a lot of movie and video,
Score
0
October 30, 2011 1:59:01 PM

Best answer selected by moneyonone.
Score
0
a b 8 Security
October 30, 2011 2:22:31 PM

This topic has been closed by Area51reopened
Score
0
!