Netsession_win

[moneyonone]

Hello,i am Josh,

i am currently using window xp professional and was wondering about this program that windows firewall blocked. A message popped up saying the name of the program "netsession_win" and it says unknown publisher and this is the first time i've ever seen this. I was wondering if i should block or or unblock it and is it part of anything that is important? and is it a malware or virus that takes my info if i unblock it?

thanks in advance

 

[ksiemb]

Hello,i am Josh,

i am currently using window xp professional and was wondering about this program that windows firewall blocked. A message popped up saying the name of the program "netsession_win" and it says unknown publisher and this is the first time i've ever seen this. I was wondering if i should block or or unblock it and is it part of anything that is important? and is it a malware or virus that takes my info if i unblock it?

thanks in advance

http://forum.sysinternals.com/am-i-chasing-shadows_topic25171.html

 

[moneyonone]

ksiemb, thanks for the reply but about the unknown publisher, it should of said akamai right? i dont know if this is a fake netsession_win or not because the publisher is unknown and it keeps asking for internet connection

 

[ksiemb]

ksiemb, thanks for the reply but about the unknown publisher, it should of said akamai right? i dont know if this is a fake netsession_win or not because the publisher is unknown and it keeps asking for internet connection

Sorry, don't know about the publisher, as to who it would be. At the bottom of that post, he had to link to experts-exchange where he said he posted his solution, but I could not get to the site. Did you read it, by chance ?

Are you getting blocks to same IP addresses his listed ?

 

[moneyonone]

yes i did read but i do not know how to get the ip and find out what it is asking for, and same i cannot access the website that he posted at the bottom

 

[ksiemb]

yes i did read but i do not know how to get the ip and find out what it is asking for, and same i cannot access the website that he posted at the bottom

He used a utility TCPVIEW. Here is his post:

Using TCPView I noticed a svchost.exe process with a continually open http connection to an IP address of 77.67.10.143
As I didn't recognise the destination, I closed the connection, it sprang back open again, this time to 77.67.10.149 - rinse and repeat as many times as you like and the connection rotates around 8 or 10 addresses in the 77.67.10.1xx range.

Here is a comparable viewer
http://www.dodownload.com/internet+network/net+scan/365tcpview+xp.html

PS: I left a msg about his bad link, but doubt that he will ever return to that forum !

 

[ksiemb]

yes i did read but i do not know how to get the ip and find out what it is asking for, and same i cannot access the website that he posted at the bottom

Josh: The Originator of that post on sysinternals, did return, and post his solution that he had posted on experts-exchange. Guess one has to be a member, and that is why the link was not avail to you and I. Here is the thread again.

http://forum.sysinternals.com/topic25171_post131523.html#131523

He describes it pretty well, and has come to the conclusion that, at least, he can live without it. He also posted another informational link in his response. Hope this doesn't "Muddy the Water !

Ken

 

[moneyonone]

thank you very much ksiemb for helping me with this, i will enable it to access internet since i watch a lot of movie and video,

 

[moneyonone]

Best answer selected by moneyonone.

 

[Dark Lord of Tech]

This topic has been closed by Area51reopened