Tech Problem Aggregator

Inbound Events to my PC - Help Please!

Q: Inbound Events to my PC - Help Please!

I have spywareblaster and many other things now on my PC. However, I just went into McAfee Log Viewer and noticed that I have 154 pages of people still trying to hack into PC. I never had this before the Altnet incident so I am just wondering what to do about it??

This is an example of one of the messages out of the 154 of them at this point:-

A computer at 82-79-158-115.oradea.rdsnet.ro has attempted an unsolicited connection to UDP port 11188/44060 on your computer.

What do those numbers represent?? What can I do about it? Thanks

More replies
Answer Match 79.38%

I have spywareblaster and many other things on my PC, including McAfee. However, I just went into McAfee Log Viewer and noticed that I have 154 pages of people still trying to hack into PC. I never had this before the Altnet incident so I am just wondering what to do about it??

This is an example of one of the messages out of the 154 pages of them at this point:-

A computer at 82-79-158-115.oradea.rdsnet.ro has attempted an unsolicited connection to UDP port 11188/44060 on your computer.

What do those numbers represent?? What can I do about this? Is there anything I can do?

Please help me understand what is going on. Thanks
 

More replies
Answer Match 77.28%

Recently my Mcafee firewall has been overloaded with inbound ICMP pings, unsolicited connection attempt through various ports, Netbios name, netbios datagram, and bootstrap protocol messages. I have scanned with spyware doctor, Mcafee, and online trojan scanners....and have found nothing. I have posted my Hijackthis log....please help me resolve this issue. Thank you.Logfile of HijackThis v1.99.1Scan saved at 5:49:09 PM, on 10/22/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.5730.0011)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\brsvc01a.exeC:\WINDOWS\system32\brss01a.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Cisco Systems\VPN Client\cvpnd.exeC:\Program Files\Fiberlink\MyLink\WENGINE\wmonitor.exeC:\Program Files\Intel\Intel Application Accelerator\iaantmon.exeC:\Program Files\Common Files\Mc... Read more

A:Firewall Overloaded With Inbound Events

Hello jnbahado and welcome to the BC HijackThis forum. I see no signs of viruses or malware in the log. It is clean.If all of the traffic is coming in to this machine, then it would probably only be coincidental if the machine were infected with anything. If the traffic is coming in to this machine then some other machine or device is attempting to communicate with this machine or some device attached to it.The firewall logs should specify the IP addresses or netbios names of what computer or device is attempting to communicate with this machine. If this machine is on a network and has any shared devices (like printers, scanners etc) attached to it then other machines on the network will send requests to this machine to determine the status of the device. That is normal.For networking assistance I would recommend posting in the Networking forum here: http://www.bleepingcomputer.com/forums/f/21/networking/ . You could post a portion of the firewall log for analysis so they can determine the source of the inbound requests and the relevance to this machine or any of its devices.Cheers.OT

1 more replies
Answer Match 77.28%

I'm not sure if this happens all the time, but I was going through my Mcafee settings and found the option to see all outbound, inbound, IDEs, etc. Being curious, I clicked on Inbound events only to see that I'm getting about 20 Inbound events every minute. Here's what the event detail says of one of them: A computer at xxx.xxx.xxx.xxx has attempted an unsolicited connection to TCP port 22349 on your computer. Now, about 99% of all the events show the same port - 22349. Very few of them show 1026, 1027, or 1028. I've done research on the latter three and it turns out that those ports are in fact very common among hack attempts. There has also been a few IPs constantly attempting to ICMP Ping me. Every now and then I see an event called Microsoft-SQL Server (or Monitor). Oh, and there are an extremely wide varieties of IPs that are logged in the events. Some are repeated multiple times. Like this one IP that keeps pinging me from the Middle Eastern/China area. I run virus scans twice a week using both Ad-aware and Mcafee, never picked anything up. However, I just ran a Malwarebyte scan and detected 2 files - but they were both registry changes from HJT (kind of weird). This post is getting a bit long, so I'll sum it up by asking: Do Inbound attempts happen all the time even if your system is clean?
 

A:Inbound Events on Mcafee Firewall.

Well, this is embarrassing. Turns out my Bitcomet uses PORT 22349. All those connections are people trying to log back on to my longterm seeding. Whoopsie. Anywho, I'm still curious to the answer for my original question above.
 

3 more replies
Answer Match 51.24%

I am using the program "Random Events Sound" to randomize my startup, shutdown, trash, etc. sounds. The program uses the windows list of sound events.

I want to ADD to that list to include the events of loading various programs.... like Internet Explorer for example. Can I do this?

There is an 'event' for "loading programs" but that seems the refer to ANY program, not specific ones.

Thanks

[)/\\/()
 

More replies
Answer Match 51.24%

It should be two files text files one for apps events and one for the system events.
This is an example about how the format of the text files and what content should be inside:
Event[0]:
Log Name: Application
Source: ESENT
Date: 2013-02-25T03:18:39.000
Event ID: 105
Task: General
Level: Information
Opcode: Info
Keyword: Classic
User: N/A
User Name: N/A
Computer: Chocolade
Description:
msiexec (48672) Instance: The database engine started a new instance (0). (Time=0 seconds)

Internal Timing Sequence: [1] 0.000, [2] 0.000, [3] 0.063, [4] 0.031, [5] 0.000, [6] 0.000, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000.
Event[1]:
Log Name: Application
Source: ESENT
Date: 2013-02-25T03:18:39.000
Event ID: 326
Task: General
Level: Information
Opcode: Info
Keyword: Classic
User: N/A
User Name: N/A
Computer: Chocolade
Description:
msiexec (48672) Instance: The database engine attached a database (1, C:\ProgramData\Microsoft\Windows\AppRepository\PackageRepository.edb). (Time=0 seconds)

Internal Timing Sequence: [1] 0.000, [2] 0.015, [3] 0.000, [4] 0.000, [5] 0.000, [6] 0.016, [7] 0.000, [8] 0.000, [9] 0.000, [10] 0.000, [11] 0.000, [12] 0.000.
Saved Cache: 1
I have two text files with it which i didn't create but i want to create or if the files are exist somewhere in windows directories then just copy the files.
If not exist then make a bat(batch) file that will create/copy the files for me.

I just attached to this thread the ... Read more

A:How can i get windows events app and events system logs ?

What are you trying to accomplish? Can you identify some specific issue you are having that might be directly associated with these event logs? BTW, the logs you posted in your description appear to just be informational logs.

4 more replies
Answer Match 51.24%

Hi, I have one machine that never records any security events in the Events Viewer, while all the other machines here do, not that I can make sense of them - but - should i be worried that this machine is never recording any security activity? They are all XP SP2 pro machines...
thx...
BS

More replies
Answer Match 49.14%

My small C# (.net 4.6) wpf application writes 100000 events to ETW (extremely fast !!).
If I start logman from my application to generate etl and reads etl from perfview, there is usually a few hundreds lost events.
However, if I let perfview start the logging by starting my application, none is lost (always).
What is perfview doing that my start of logman is not ?
My C# code:
Guid eventSourceGuid = MyEventSource.Log.Guid;
Process proc = new Process
{
    StartInfo = new ProcessStartInfo
    {
        FileName = "logman.exe",
        Arguments = [email protected]"create trace MyTrace -bs 1024 -nb 16 1024 -p {eventSourceGuid.ToString("B")} -o {myEtlFolder}\mytrace.etl",
        UseShellExecute = false,
        RedirectStandardError = true,
        RedirectStandardOutput = true,
        CreateNoWindow = true
    }
};
proc.Start();
Process.Start("logman", "start MyTrace");
...
Process.Start("logman", "stop MyTrace");
Process.Start("logman", "delete MyTrace");

More replies
Answer Match 42.84%

I have comodo firewall installed and
noticed my system was running slow. Opened up the firewall and it showed that the where over 100 inbound connections. Seems like I have a virus now. Can anyone shed somelight as to why so many connections. Keylogger? Thanks in advance.

A:Over 100 inbound connections

If you get any inbound connections without any alert then there is something in your firewall rules that allows it.

Can you post screenshots of your Network Security policy?

Or you could open the Stealth Ports Wizard and select "Block all incoming connections and make my ports stealth to everyone". Then see if you still get the connections.

Or if you have never configured the firewall as Proactive Security you could right click the tray icon and select that configuration. That would reset all your rules but you will need to answer alerts correctly while new rules are being created.

You do not say what version of Comodo firewall you have. Version 5 is expected to be released today but I would not suggest moving to that quite yet until any bugs have been ironed out.

p.s. your other topic needs a reply.

8 more replies
Answer Match 42.84%

What is the maximum number of inbound connection for Win 7 Pro x64?

I am helping someone setup an office where the host OS running Win 7 Pro x64, and have about 15 client machines connect to it.

The client PCs would be used to save/access data stored on the host machine.

Would getting a full blown server be a better solution?
 

A:Win 7 Pro X64 & inbound connections

I am not sure what you mean by "inbound connection." If you mean simultaneous connections for file sharing the limit for Windows is 10 for Professional/Business versions and 5 for Home versions.
 

3 more replies
Answer Match 42.84%

All,

I am looking for a router solution that supports both inbound and outbound one to one NAT. As the project is cost sensitive, I am looking for the lowest line of product that supports this. I tested a Netgear and its one to one NAT is inbound only and apparently they don't have an outbound NAT.

Can anyone assist or point me to a router that offers this capability?

Thanks

Scott
 

A:Inbound and Outbound One to One NAT

8 more replies
Answer Match 42.42%

Hi,

This is a bit of a continuation to my previous post, but since the topic was completely false and lots of unnecessary analyzing was done, I now decided to continue under appropriate topic. You can find the previous topic here http://forums.techguy.org/showthread.php?p=2264347#post2264347

Basically, my problem is frequent disc access and sometimes windows not closing properly. I have all the security updates and programs, but none of them finds nothing that could indicate a trojan or other malware (I've tried them all, believe me). You can check out the HJT log from the link above.

I have F-Secure AV with firewall. If you have experience with F-Secure, you probably have a better chance of helping me out. A few days ago I didn't know what to search for, but today I dug out some info on my firewall's properties.

F-Secure lists under advanced settings the services that are in use on your system. Scrolling up and down the list I found out some disturbing entries that it claims to be enabled. Under rules of alerting, I found out that these processes go under the name of malicious inbound probes. Firewall alerts on incoming. Sounds creepy. See picture. I'm not able to disable these from this services list, so I have to do it somehow else. The only problem is, I don't know where these are on the registry and how to remove them manually. Might it be possible that they are resident on a remote machine that I'm just being traced into? Or are these b... Read more

More replies
Answer Match 42.42%

If there is a RAT on my computer and I want to close ports so that the RAT is ineffective, should I be mainly concerned with closing inbound or outbound ports?

I see in some firewalls, like mcaffee livesafe, that i have the option to "decide which unknown programs can connect to the internet." I have to approve them or they can't connect, so it seems... I can also set the firewall, mcaffee livesafe, so that "i decide which programs can connect to the internet." With both of the above, I block everything hoping that if there is a RAT on my computer that it will be rendered ineffective.

In my security history, I see that incoming connections were blocked over 1,000 times in the last 24 hours. I am using wifi on a new pc. Only 4 outbound connections were blocked. I am not sure if my computer is infected. I have received RAT in different ways........emails, ip addresses of mine known to the hackers and then sent over, logging into sites like techguy (but not techguy) whereby there MAY have been a RAT link connected to my inbox link and when i click on it the RAT downloads.

Can i completely lock down my computer so that if i am using wifi or anything else that a RAT will be ineffective? I am very aware that wifi is the worst to use and i have had someone targeting me with RATS for the past 5 years and am sure you would like to ask me why do i think i have a RAT on my computer. I know how to get rid of them, but rather than always going to this extreme,... Read more

More replies
Answer Match 42.42%

Hi I am trying to connect to iTunes Store and uTorrent but they cannot connect to the internet, I have set up rules for them time and time again uninstalled and reinstalled numerous times and yet the problem persists, I am at my wit's end and any help would be greatly appreciated.

A:Problem With Inbound Connectivity

Ok it works in safe mode but I need a permanent fix.

3 more replies
Answer Match 42.42%

I had something weird happen last night. I have norton firewall and antivirus 2003, used 2002 before. Around 8:45 till 9:45, my firewall kept going off with a high risk inbound tcp. Now, not only did it go on for the whole time, it was non stop. Every 4 to 5 seconds, sometimes every second, i was getting inbound tcp at a high risk. Now, only one or two of the numbers are the same, the rest are all different numbers of the computers. Now when I called my isp, they told me that they could trace the calls but thats about all they could do as there were about 245 hits. They checked out a few and they were from allover the place. One, a highway state maintenance in Alabama? an aol subscriber, and another one from a hotmail in atlanta. Weird, anyway, they said that it might be one of my programs. wouldn't it be the same tcp number if it was? my firewall is set up to automatically allow updates to enter so it should not be that, also they can access whenever, but the above items are monitored before access. Any ideas? suggestions?
 

A:tcp inbound endless attempts?

12 more replies
Answer Match 42.42%

Take the Shields Up Test and find out if your ports are secure:

https://www.grc.com/default.htm

Attachment 24493

A:Is Your PC Secure from Inbound Attacks?

Originally Posted by JustATest


Take the Shields Up Test and find out if your ports are secure:

https://www.grc.com/default.htm



That test can provide a false sense of being secured for systems behind a firewall; for example a laptop behind a broadband router at home. The result might be "stealth", but that does not necessarily mean the laptop will perform the same, when it is accessing wifi hotspots.

6 more replies
Answer Match 42.42%

I'm using Look N Stop right now. Is there a firewall that offers better inbound protection? I mainly want to use this laptop at coffeeshops and airports. For outbound, I use Malware Defender, is this sufficient?

More replies
Answer Match 42.42%

Hello, I am trying to run a small network of 7 machines all running Windows XP home. One of these machines is set up as a server. Unfortunatly I have now found out that Windows XP home has a limit of five inbound connections and only 5 of the computers can access information on the server at once. Is there any work around to this limitation such that the sixth computer can access the information on the server?

Thanks for any advice

- RuNa
 

A:Inbound connection Limitations

Windows 2000 has a 10 connection limit, I wasn't aware it was more restricted for XP. In any case, have you considered something like SnapServer, basically a hard disk with a network connection? It's a cheap solution to having a server without the expense.

You could also upgrade to XP-Pro, which I suspect has the 10 connection limit that W2K has.
 

2 more replies
Answer Match 42.42%

Hi, all --

This is getting me crazy, so perhaps one of you will know where to go for what I can't find:

On my office network, my administrator set me up with the correct port going through regedit for me to login to my computer from home. I am running XP Pro.

I did all the same preconfiguring for another person in my office who's running XP Home. Who knew Home doesn't offer incoming remote, just outgoing (well, you all here probably did...).

My administrator is off-site, so I told him I'd go find the software from Windows (or somewhere) but he found it first. THAT'S when he told me "there's a way to d/l this and get it to work for HOME but he didn't have time to go through all of this right at the moment. I told him not to stress 'cause I had a "Secret Weapon: and I would get all of the info we needed. (That would be YOU guys!)

Has anyone gone through this -- perhaps someone whou could walk me through and tell where I can download this from?

TIA -- caron1959
 

More replies
Answer Match 42.42%

Greetings:

I have a single static IP address. I just added a new PC running Apache to my internal LAN so now I have both an IIS server located on x.x.x.2 and the new Linux webserver on x.x.x.3

Web traffic (port 80) coming to my domain (lets call it foo.com) is routed to the IIS server on x.x.x.2

What I need to do is route traffic coming to a specific subdomain like new.foo.com to the apache server on x.x.x.3 and let all other port 80 traffic continue on it's merry way to the IIS sever on x.x.x.2

Any chance my Actiontec router can do that?

3D0G.
 

A:Inbound web page routing

14 more replies
Answer Match 42.42%

First of all this is my first post - and as a non geek I want to thank all geeks out there for helping us heaven knows MS can't

Okay here we go - I send an email from my business Outlook account I get a reply and then when I in turn go to reply it changes the reply to e-Mail/account to my personal email address/account.

Same when someone sends me an e-mail to my business e-Mail and when I reply it changes to my personal e-Mail account.

Outlook 2007 - Window XP 32Bit.

The business account is hosted elsewhere as well for web mail etc. and the POP and SMTP addresses are not the same as my personal account. Yes the business e-Mail account is set as my default for all new e-Mails.

If this doesn't challenge you nothing will

Thanks for any help you provide - not earth shattering just annoying I want professional e-Mails to stay that way and not have everyone get my personal address with my "Bite Me" signature. by not noticing when I reply.
 

A:Outlook inbound account changes

16 more replies
Answer Match 42.42%

I am having problems using RDC to connect to an HP laptop running Windows 7 Ultimate, 32 bit edition. The HP laptop is connected wirelessly to my home router. The second computer is an iMac (running same OS as HP) cabled to a switch, which is cabled to my home router router. A third computer, a Thinkpad running Win7 64 bit Pro (and cabled to the same switch as the iMac), behaves identically to the iMac, so I won't mention it further.

I can always RDC from the HP into the iMac, but have problems RDCing from the iMac into the HP. I will get the error "Remote Desktop can't connect to the remote computer for one of these reasons: 1)Remote access to the server is not enabled 2)The remote computer is turned off 3)The remote computer is not available on the network"

When this error appears, I am unable to ping the HP from the iMac. I am always able to ping the iMac from the HP.

The HP is awake when in am trying to connect to it. In fact, both computers are set to never sleep or hibernate so I won't have to wake up a computer to RDC into it.

Both computers are set up to allow incoming RDC connections. I have confirmed that the antivirus and Windows firewall settings on the HP and iMac are identical. I have even tried disabling both Windows firewalls, to no effect.

Now here's where it gets strange. If I first RDC from the HP into the iMac and then disconnect, I can then ping the HP and RDC to it from the iMac. If I reboot the HP, the problem comes back.

It looks like ... Read more

A:Can only get inbound RDC after first making outbound RDC

I would check the firewall settings on the HP computer make sure you have an inbound rule to allow RDC or port 3389.

You also wont be able to ping the PC by default ICMP traffic is blocked.

1 more replies
Answer Match 42%

I'm a new user of VOIP. My network connect is Cable modem -> router (Dir 615) -> ATA (SPA122) .
Outbound calls have no problem. But inbound calls sometimes work, sometimes not ( got message: not in service)
Anyone can help?
 

A:inbound calls do not work properly

Tried reversing the routers?
 

1 more replies
Answer Match 42%

Hello,

I was wondering how secure the windows Vista firewall is as far as inbound security. I currently have it set to block all incoming connections, however, when doing a port scan on it from inside my network, multiple ports showed as being there, although the PC itself did not show as being active (it does not respond to pings). I tried to telnet to a couple of the ports and didn't get any prompts, just a blank screen that eventually dropped me back to the command line, whereas a bad connection would tell me it can't connect. So I'm wondering why exactly they are showing up, and would someone be capable of connecting to them. I am just trying to get it nice and secure before I go hopping on any public wifi networks, because I know a few of them don't do client isolation. Thanks in advance for any help!

Scott

A:Vista firewall inbound effectiveness

Im not an Expert on Windows Firewall in Vista but i Think you should have some rules set before you even think about Going on a public WiFi Hotspot. i know on mine ive had no problems but im not sure how ive set it up ive jsut trialed and errored with it to be perfectly honest. Vista does make it easy though. have a look and you might figure it out

3 more replies
Answer Match 42%

Opened my Comodo Firewall screen and there are 20 outbound connections and 4 inbound connections.The outbound connections are actually fluctuating between 14-24 as I watch. BTW, this is a new install of Windows 7 as of 4 days ago.What are these connections and which (if any) should be of concern?New Info:As soon FireFox is closed, the outbound drops to 8 connections.Then as soon as FireFox is opened, it jumps back to over 22 connections. Once FireFox opens, the home page is www.google.com so not sure why the number of connections jump and if its typical.

More replies
Answer Match 42%

Is there any option to enable inbound and outbound alerts in windows. 8.1 without addind any third party app?
 

A:How to get inbound/outbound alerts in windows

sinu said:





Is there any option to enable inbound and outbound alerts in windows. 8.1 without addind any third party app?Click to expand...

WFwAS will generate alerts, but not like 3rd party softs. You can add BiniSoft's Windows Firewall Control - it will give good outbound connection alerts plus it has some useful features - like WhoIs, IPVoid, etc lookups.

I like BWFC, but it can be quite a busy experience until I have "Allow" rules configured for all safe apps on my system.

If you are going to use WFwAS then I would use a Guest Account or anti-executable; some malwares using an Admin account can disable WFwAS, UAC, Windows Action\Security Center, etc. Just be careful if you use Windows firewall - it is good at filtering - but it needs to be protected... Windows' own built-in self-protections are weak.

FYI those same malwares can sometimes disable 3rd party AV - either partially or completely. For example, Avira - completely, Comodo - partially\malfunction, Kaspersky - partially\malfunction...
 

2 more replies
Answer Match 42%

Greetings, I've got a LAN running with four machines - two of them wired, two of them wireless. All are running XP Pro.

All machines shares are accessible by the network except for one machine, 'B' - None if it's network shares are viewable, it's available on the LAN (and in the right workgroup), pingable, directly accessable via remote desktop - but none of the other machines on the LAN can access that one machine.

It however, can access all the other machines with no problems. No firewalls enabled, nothing but NOD32 virus scanner and all the internet components of it are disabled, so only the file system monitor is active, nothing interfering with networking.

Have looked through all the processes and everything looks normal.

Any idea what else could be causing this? The only other time I've ran into this type of problem was when I had Win Firewall enabled, and it's definately disabled on this machine - Unless Windows is just lying to me and not actually disabling it....

Thanks in advance,

miR
 

A:LAN inbound problems to single machine

8 more replies
Answer Match 42%

I am not that experienced with setting up a network but I am learning all the time.

I need to purchase a router that will allow me to set up port forwarding (which my existing SMC router can do) AND filter inbound traffic to that specific open port so that only one to five IP addresses are allowed to use that open port (which my existing SMC router cannot do).

I've looked at the Linksys RVS4000's documentation and it seems to do what I need but the user reviews of the router are more negative than positive regarding slow download speeds which I cannot accept.

I've found that the D-Link DIR-655 (and 635 and 625) have the capability of using inbound filtering but again the CNET review along with the user reviews leave me skeptical.

I don't feel qualified enough to go the CISCO route due to my perception of the complexity of the setup of these routers.

Anyone care to make a recommendation for a router that will have an access control list feature via IP, accommodate 20 users and hopefully have a decent VPN function?

Thanks in advance.

Joe
 

A:Recommend router with inbound filter

8 more replies
Answer Match 42%

Hi all, I'm having a particularly nasty problem with my sisters computer. I installed windows xp pro on that comp, and it ran flawlessly the first time i booted. Media player, explorer, MSN are the progs she uses most, so I made sure those ran fine, and they did.

When I rebooted the PC After copying her backed up data (mostly mp3 files) back to harddisk, she wanted to run mediaplayer.. it crashed, the error report told me to update mediaplayer.. so i did.
That worked fine for a while, she shut the comp down when done with it.. but the next time she booted it, explorer crashed the moment she tried to open it, and msn started crashing as well.
When she tried to reboot, the comp just hangs. It will only boot in safe mode.

I'm thinking it might be a virus, but after the countless hours spent trying to figure out what the @#[email protected] is up with the thing I'd like someone's opinion before I try anything else to fix this.

Does this problem sound familiair to anyone, or do you need more specific information?
 

A:Fresh install - crashes inbound

6 more replies
Answer Match 42%

I use RDP frequently to remote into a PC to start downloads, generally off usenet. I want to be able to reserve say 100-200kbps for RDP connections, since when i start the downloads, usenet will saturate the connection. I can limit the usenet, but want it to have all the bandwidth when I am not in a RDP session.. Is there such a (preferably free) way to do this in W7?

A:Reserve Bandwidth for Inbound RDP Connections

What client are you using for Usenet (Newsleecher if I remember right had an automatic setting). It's been years since I have used Usenet but I may be wrong but I believe the only way to do it is to manually back the bandwidth down while your RDP'ing and then turn it back up after, I know thats a hassel but I don't think you can do what your asking..

I've seen some programs for xp and windows server 2008 but nothing for windows 7!

3 more replies
Answer Match 42%

My Belkin Wireless N Router has been recently showing UDP Floods constantly coming from random IPs and random ports, and targeting only one of my computers. Here is the log from the router so far:Firewall Log06/15/2010 10:36:15 **UDP Flood to Host** 77.83.225.60, 35168->> 192.168.2.2, 9305 (from WAN Inbound)06/15/2010 09:23:21 **UDP flood** 221.64.21.205, 11407->> 24.110.44.8, 9424 (from WAN Inbound)06/15/2010 09:23:21 **UDP Flood Stop** (from WAN Inbound)06/15/2010 09:23:21 **UDP flood** 123.192.210.21, 8080->> 192.168.2.2, 9305 (from WAN Inbound)06/15/2010 09:23:21 **UDP flood** 72.189.117.247, 22887->> 192.168.2.2, 9305 (from WAN Inbound)06/15/2010 09:23:21 **UDP flood** 112.118.146.203, 16707->> 192.168.2.2, 9305 (from WAN Inbound)06/15/2010 09:23:21 **UDP flood** 24.185.249.57, 22303->> 192.168.2.2, 9305 (from WAN Inbound)06/15/2010 09:23:20 **UDP flood** 94.96.170.111, 19505->> 192.168.2.2, 9305 (from WAN Inbound)06/15/2010 09:23:20 **UDP flood** 86.11.91.87, 10772->> 192.168.2.2, 9305 (from WAN Inbound)06/15/2010 09:23:20 **UDP flood** 111.224.3.108, 32768->> 192.168.2.2, 9305 (from WAN Inbound)06/15/2010 09:23:20 **UDP flood** 121.117.85.41, 15072->> 192.168.2.2, 9305 (from WAN Inbound)06/15/2010 09:23:20 **UDP flood** 81.227.130.18, 33006->> 192.168.2.2, 9305 (from WAN Inbound)06/15/2010 09:23:19 **UDP flood** 113.4.196.166, 1483->> 192.168.2.2, 9305 (from WAN Inbound)06/15/2010 09:23:19 **UDP fl... Read more

A:Router showing UDP Flood from WAN Inbound

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

2 more replies
Answer Match 42%

I am beyond frustrated, i usually can fix any software issue through troubleshooting and i just cant figure this out. I moved, didnt change anything in my set up and im assuming its just my headphones (with built in mic) malfunctioning. I went and bought just a desktop mic and plugged it in the inbound port and still the PC is not recognizing an inbound unit. I have 2 "corrupted" drivers in my device manager.
1. BT mini-receiver
2. SM Bus Controller

I have tried searching for drivers online and even on driver disks that i have and nothing shows up. i do not know what these devices are and have tried searching forum after forum. ive tried uninstalling and reinstalling my audio drivers and nothing changes.

When i right click volume and go to recording devices there is nothing there to choose. This has to be a driver issue, but ive not a clue where to look.

I would be gracious for any assistance!
 

A:Inbound issue (driver possibly)

fixed

ok so i fixed it, before when i would try to reinstall my audio driver (from disk) it would have an error telling me to restart and try it again. And before ive tried uninstalling the two "error" devices in the manager and reinstalling them from the device manager screen, but it never worked. So i uninstalled the 2 "error" devices from the manager, went to the audio driver on the disk and tried installing it from there and it finally installed fully and restarted and showed an audio input device.

I do not know if this will work for anyone else having the same issue, but it worked for me. no real science to it, just guessing and checking every possible solution!

Thanks!
 

4 more replies
Answer Match 42%

I started having issues after a day of my clean Win 7 installation, basically System.exe started making over a 100 local inbound connections, i managed to terminate them all and block further inbound connections but my internet seems to be slower now.So here's my hjt log, thanks for your help!Logfile of Trend Micro HijackThis v2.0.2Scan saved at 2:21:03 AM, on 9/23/2009Platform: Unknown Windows (WinNT 6.01.3504)MSIE: Internet Explorer v8.00 (8.00.7600.16385)Boot mode: NormalRunning processes:C:\Windows\system32\taskhost.exeC:\Windows\system32\Dwm.exeC:\Windows\Explorer.EXEC:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exeC:\Program Files\iTunes\iTunesHelper.exeC:\Program Files\AntiLogger\AntiLogger.exeC:\Program Files\ChrisTV PVR\ChrisTV_Agent.exeC:\Program Files\Avira\AntiVir Desktop\avgnt.exeC:\Program Files\Comodo\livePCsupport\ELPS.exeC:\Program Files\Comodo\COMODO Internet Security\cfp.exeC:\Program Files\Java\jre6\bin\jusched.exeC:\Program Files\Free Download Manager\fdm.exeC:\Program Files\Windows Live\Messenger\msnmsgr.exeC:\Program Files\Windows Sidebar\sidebar.exeC:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exeC:\Program Files\IncrediMail\bin\ImApp.exeC:... Read more

A:HijackThis log (Inbound connections issue)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Pleaseinclude a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.Please download OTL from following mirror:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedIn the upper right hand corner o... Read more

2 more replies
Answer Match 42%

I have 2 WIN XP pc's connected to a switch which is fed by a single internet feed. They were both working fine (have for some time) until this afternoon when one quit receiving email and cannot surf the net. Additionally, Norton 360 says it is no longer protected. I have the same load of 360 on both PC's per the instructions and both are activated with nearly 300days of account left.

I have disabled and repaired the connections to no avail. I have plugged both pc's into new sockets in the back of the switch. I have re-boot the bad PC.

I have checked the internet email account and it is set up exactly like the other pc which works fine. I can surf from the "bad" pc to the good one and see anything on the good on. The reverse is also true.

And suggestions would be helpful.
 

More replies
Answer Match 42%

Dell Dimension 2300
1.7 Ghz Celeron processor
512 mb Ram
20 GB HD
Verizon Small Business DSL
Linksys Router BEFSX41
Westell DSL modem
Norton Internet Security 2007

I have been scratching my head on this problem for a week and I hope someone can help me. I maintain a small network (2 computers) network for a non-profit. At the beginning of July I got a call from one of users and said that he couldn't get email or internet access. When I was able to get onsite I noticed that the network card was not working. They had no lights on it and they were getting an internal IP address (169.x.x.x) instead of a router supplied one (192.168.2.x).

I didn't think much of this. I had a spare NIC at home and took the machine home to work on it. I changed the NIC with the spare one that I had, XP found the driver for it and I was online in a matter of minutes. I ran a Live Update on the Norton programs and everything was working great on my home network.

The following week I brought the computer back and put it in place and when I fired it up I was getting a response when I tried to use the web browser but the pages were taking 20+ minutes to load. It was like the inbound flow of data was constricted to almost nothing. I double-checked all my settings. The new NIC appeared to be working fine. I was not getting any Event viewer errors and I was assigned a DHCP IP address that should have worked just fine. I double checked these settings against the other computer on the network th... Read more

More replies
Answer Match 42%

hey , i have hade this issue for the last couple of days Svchost blocked by malwarebytes. i cant figure out how to make it stop. i have scanned with malwarebytes , avast , malwarebytes anti rootkit. there not picking up anything. but svchost block ip inbound still popping up every few seconeds .
is this a false postive ?
 
if someone has some free time to help me out its mush appreciated !

A:Svchost ips inbound is getting blocked by malwarebytes

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Remove this program in bold via the Control Panel > Programs > Programs and features applet.KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )===Press the windows key + r on your keyboard at the same time. This will open the RUN BOX.Type Notepad and and click the OK key.Please copy the entire contents of the code box below to the a new file. start
CreateRestorePoint:
EmptyTemp:
CloseProcesses:

(@ByELDI) C:\Program Files\KMSpico\Service_KMS.exe
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
CHR Extension: (Betalning via Chrome Web Store) - C:\Users\poles\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-18]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2016-05-06]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-05-06]
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [745664 2016-01-12] (@ByELDI) [File not signed]
S3 cpuz138; \??\C:\Users\poles\AppData\Local\Temp\cpuz138\cpuz138_x64.sys [X]
Task: {B61DA5AA... Read more

0 more replies
Answer Match 42%

Hello,
 
I was just looking at my Windows firewall settings and noticed that the "inbound settings that do not match a rule are blocked" option appears to be turned off for Domain, Private and Public profiles. When I look at the properties tab it says that inbound connections are set to "blocked (default)" 
 
So, should the "inbound settings that do..." have the green check-shield or is it showing the red not-on setting OK?

A:Windows Firewall Inbound connections

The red icon means that inbound settings that do not match a rule are being blocked. So yes, that is what is should be showing.

2 more replies
Answer Match 42%

A couple days ago I downloaded some web-based email into outlook 2003 on a brand new computer (w/ XP Pro which I'm using for the 1st time). Now every two minutes a spammed email arrives dated july 7th from the same person. Not only does it rapidly fill my inbox, a fading popup of the email arrives on my screen each time. It?s maddening and I can?t seem to make it stop. I?d be grateful for some help. Thanks.

A:Outlook: recurring inbound email

If you have OFFICE 2003 you can right click on the email and and add sender to a block senders and/or junkmail list.

1 more replies
Answer Match 42%

Hello,
Here's a crazy mystery. When I veiw the Mcafee Inbound Events Log we found that other PCs on the same home network are reporting in their 'Mcafee Inbound Events Log' the following six events from this pc every 20 minutes:
TCP port 2191
TCP port 9100
spooler
HOSTS2 Name Server
HTTP protocol over TLS/SSL
World Wide Web HTTP

The thing about Mcafee is it's reporting attempted intrusions. And they all appear from the offending machine and no other machine. As follows:
"A computer at xxxx has attempted an unsolicited connection to TCP port 443 on your computer. The source IP is a 'non-routable' IP"
"A computer at xxxx has attempted an unsolicited connection to TCP port 81 on your computer. The source IP is a 'non-routable' IP"
"A computer at xxxx has attempted an unsolicited connection to TCP port 515 on your computer. The source IP is a 'non-routable' IP"
"A computer at xxxx has attempted an unsolicited connection to TCP port 9100 on your computer. The source IP is a 'non-routable' IP"
"A computer at xxxx has attempted an unsolicited connection to TCP port 2191 on your computer. The source IP is a 'non-routable' IP"
"A computer at xxxx has attempted an unsolicited connection to TCP port 80 on your computer. The source IP is a 'non-routable' IP"
Thanks in advance for any help or direction,
Larbin

More replies
Answer Match 41.58%

We are a business using Msoft Exchange and Outlook 2003 for our email. When one of our users receives an email from an AOL user that has an attachment, when they first get the email, it looks as if there is no attachment. There is no envolpe icon, no attachment file name. If they forward the email, to me, then the attachment shows itself in the form of the icon, and file name etc, and I can open it. I can then forward the mail back to the person that received it initially, and they can then see and open the attachments. Does anyone have any idea why this is happening and how to correct it. Some AOL users can email us with an attachment and all is okay.
 

More replies
Answer Match 41.58%

Hello.

I was running Windows 8 x64 without any issues. Recently I updated to 8.1 and am having a weird issue.

The internet works fine for general browsing and even for streaming like netflix or pandora/spotify. However, when I am using a program other than a web browser that pulls information in from a server based on data that I enter, it seems like it isn't going through. It is like the program doesn't even see the internet.

I am a pilot and have a program that allows me to input data and retrieve charts and other pertinent information for my proposed route. When I enter in the data and press the button to retrieve the charts, etc, I get a message saying error downloading files. At first I thought it was this program or a problem with their server. However, over the past days every program that I use that pulls information from the internet is doing the same thing more or less. I have weather planning programs that can't get map or weather data; I have flight and rout planning programs that can't even retrieve the listing of airports, and I have performance calculators that will not receive any information. These are just some of the programs that I use. They are all made by different developers and connect to different servers. I can't even get a basic application to receive NOAA weather data.

I tried adding a firewall rule for the applications and when that didn't work, I disabled the firewall all together through the advanced settings. I also disabled windows defe... Read more

A:After updating to 8.1, inbound/outbound traffic blocked

I just found a more relatable example of when this is noticed. I was trying to add a local USB printer through the Windows Add Printer dialog. When I click the button to update the list of printers, I get a message saying: "Unexpected error occurred when downloading printer list. Check your connection."

7 more replies
Answer Match 41.58%

Hello guys,
 
I'm a I.T. Security student graduated 1 year ago. I was trying to tweak my Windows firewall with Advance security but the inbound rule failed to work. I created the following inbound rule:
 
Program : Any
Protocol Type: TCP
Local Port: Any
Remote port: 80, 443
Local IP address: Any
Remote IP address: Any
 
Block the connection
 
What I was trying to do (or at least what I want to try to do) was to block any web server from replying me (sending me the web pages) when my web browser try to request for it. It turns out the rule failed to work. Anybody knows why?

A:Windows firewall inbound rules does not work.

Erm... any help?

8 more replies
Answer Match 41.58%

I'm running Win2k on one of my servers with exchange 2k to manage email accounts. I'd like to set up inbound and outbound mail failure notifications to come into the admin mailbox. I'm pretty sure it has to be done in the active directory but I'm not sure where....

Anyone have any ideas?

Thanks,

Tom
 

More replies
Answer Match 41.58%

Hi there,

As this is my first post, I'll go through a quick presentation. My name is Patrick, 26, living in Switzerland.

I'm looking for a few help to solve an... unusual question : I'm quite sure there is tons of topics on "how to increase my download speed", my wish is to "decrease it"

Well, the reason is simple : I do have several machines on my private network. And when I do download files on my main machine from servers which are really fast (for example Megaupload or similar), I do saturate my 10Mb connection with 1.25 MB/s, which means other machines has strictly nothing left. In fact, they even cannot print a Google page.

I found some documentation on "Advanced QoS options" at Param?tres de QoS avanc?s (in french, sorry, there should be a translation), which seems to be dedicated to Windows Server versions. I tried to use the same on Windows Vista (the options exists and can be changed), but this had no effect at all on my download speed in Firefox.

I set the value to the least (0 = 64Kb / sec) but was still downloading at 1.2 MB/sec. I tried to reboot the machine, in case this option would take effect only after it, but this option really seems to have no effect at all.

Is it something that indeed works only on the server edition of windows ?
Is there another way on windows to limit the inbound internet connection ?
Would you recommend any free software which can make something similar ?

Thank you in advance, any help will be f... Read more

A:Limit inbound internet download speed

Hello, Your best bet is to QOS at your router.

What router do you have? Depending ion the router, if supported i'd recommend using dd-wrt firmware on it.

So post up your router, and we'll go from there.

6 more replies
Answer Match 41.58%

The Windows 10 launch wasn?t the smoothest around, but it went pretty good overall. Most people are happy with the upgrade and are enjoying all the benefits that the new operating system brought along. But it wasn?t good for everyone and quite a few issues for some people from trackpads lagging to browsers crashing and much more.

Microsoft was quick to release patches for most issues reported and it looks like they?ve collected them all into one package and probably added the latest fixes as well and dubbed it Service Release 1, or SR1. According to the latest reports, that is inbound for next week, the 10th of August. So that is great news for everyone that stuck it out despite minor trouble instead of reverting back to their old Windows 7 or 8/8.1 installation.

?Windows 10 SR1 is a cumulative update package. It will bring some new features, but the main purpose is to repair the system after release and fix the problems exposed.?

Later this year, Microsoft plans to provide more substantial upgrades and add new features to OneDrive and Skype, but most importantly browser extension support for Edge, Microsofts new and quite popular browser.

Have you made the switch to Windows 10 and if so, how do you like it so far? Had any major issues, then please let us know in the comment sections.Click to expand...

http://www.eteknix.com/windows-10-service-release-1-inbound-next-week/
 

More replies
Answer Match 41.58%

For a while now Malwarebytes Anti-Malware has been blocking inbound and outbound IPS from C:\WINDOWS\System32\svchost.exe
Some examples are:
Detection, 11/28/2014 5:06:40 PM, SYSTEM, TALHA-DELL, Protection, Malicious Website Protection, IP, 77.78.251.157, 53770, Inbound, C:\WINDOWS\System32\svchost.exe,
Detection, 11/28/2014 5:13:29 PM, SYSTEM, TALHA-DELL, Protection, Malicious Website Protection, IP, 195.216.179.11, 60818, Outbound, C:\WINDOWS\System32\svchost.exe,
 
I'm also getting similiar stuff for bittorrent, but from a quick google search that looks to be normal. Please help.
 
EDIT: It seems that the problem only occurs while I'm using the bittorrent cllient to upload or download a torrent, and the IPs are the same ones being blocked with bittorrent. So I'm guessing it has to do more with the nature of the peer to peer part of torrents. It looks like MBAM is just doing it's job and that tehre isn't anything wrong with my system.

A:MBAM blocking inbound & outbound from svchost.exe

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.

1 more replies
Answer Match 41.58%

what up dudes, i just install MacAfee security center7 and i was viewing the recent inbound event (i guest is the [edited= stuff] that the firewall blocks) and i see imcp ping,udp port with different # ,tcp,www http,bbn can any one please explain this stuff please help me
thank u
 

A:what the heck is......MacAfee security inbound event

Hi, Warning, we do not appreciate the title you had up there, I have edited it to "heck". And, cleaned up a word in the post. keep the language to a level suitable for family entertainment please.
This is not your average hangout, stick around maybe get some help with the McAfee stuff.
 

3 more replies
Answer Match 41.16%

Hey there.

To set a history how all the crazy things happened, I came by one of those '' naughty '' sites . But boy I messed up.

The moment I visited the site it automatically downloaded some file in my temp folder *without my conscent* Please note I had Norton Premium up to date on updates, and all, so I did not understand how it could allowed it. What happened afterwards was a ton of requests to allow the file to make changes in my windows folder, which I tried to decline again, and again. Problem is that it kept asking for the same request, and no matter if I tried to use task manager, it just would ask for it again making me look at the forced request screen thing.

Well I ended up saying yes, thinking that Norton likely would prevent it downloading the Trojan, or whatever. It did, but it kept trying to download it again, and again. I got warnings again, and again of


25-01-2015 17:03:33

High Risk

An attempt fromHOMEPC have been blocked.

System Infected: Trojan.Ransomlock.G,

"HOMEPC (192.168.0.14, 50420)","109.200.5.91, 443",192.168.0.14 (192.168.0.14),"TCP, Port 50420"

Attack is due to \DEVICE\HARDDISKVOLUME4\WINDOWS\SYSWOW64\RUNDLL32.EXE.

I knew the file was a windows file, and also the fact it would replace itself if deleted. I did end up getting to that part after Norton Support Center did jack **** to help me, mostly doing things I already knew myself (sfc /scannow, power eraser, msconfig ) and s... Read more

A:Rundll.32 exe, schost.exe, and ship ton of UDP (17) Traffic inbound using svhost.exe

KasperH,

Hi and welcome to TSF.

Please note that this is under the supervision of an expert analyst.

Please read NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help and post/attach the three logs (dds.txt, attach.txt and gmer.txt) mentioned. These logs will give me a place to start and give you back a better working computer. If any problems completing, continue with next log and let me know what happened in your next post.

Please Read! "Who is Helping you?"

If you haven't already, please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools (near top), then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Thanks. I can begin working on removing your malware when you submit those logs.

Please be patient with me during this time.

13 more replies
Answer Match 41.16%

My ESET firewall just openned a window telling me that a remote computer is attempting to communicate with an application running on this computer. Do you wish to allow this communication?

Application: LSA Shell (Export Version)
Publisher: Microsoft Windows Component Publisher
Remote computer: reverse.4.53.48.65.static.ldmi.com (65.45.53.4)
Local port: 500 (isakmp)

Do I allow this action?

This, of course, relates to C:\WINDOWS\system32\lsass.exe

I remember the old connection with the sasser worm. So, that's why I want to be sure it's ok to let it through.

Thank you
 

A:Solved: LSA Shell (Export Version) Inbound traffic

16 more replies
Answer Match 41.16%

Hi,
 
I have a problem with Windows 7 Firewall
I added an exception for port 1433 and I set the scope as follows:
- Local IP Address: Any IP Address for my local LAN
- Remote IP address - These IP Addresses where I added my home IP address.
I can access the port from my home, but I cannot access the port from local LAN.
What can I do?
 
Many thanks,
 

A:Windows 7 Firewall inbound rules - scope don't working

Open the Control Panel, click on Windows Firewall, click on Restore defaults.
 
Did you use the Advanced Settings to create a new rule IP addresses?

1 more replies
Answer Match 41.16%

I have been able to access my web server on port 80 without a problem for several years. Just recently, when I attempt to access the site, it loads extremely slowly or I end up with a gateway timeout. If I attempt to access the site over ssl on port 443 (or any other port), the page loads fast. I am not having issues with any other ports. When accessing the internet from inside the network on port 80 everything works fine. It seems like just port 80 inbound is effected. I have searched for a solution and could not find anything. I host my own DNS and my servers are Novell Netware 6.5 with apache2.

Any help would be appreciated.

Thanks,
Jason Rothwell
 

More replies
Answer Match 41.16%

Just wondering if anyone else is having this issue or can test it on their machine to eliminate possible install corruption on my end.
Thanks

A:Firewall Crashing When Adding New Inbound/Outbound Rule

Did you check in the Event Viewer what module makes it crash when you try to add a rule?

11 more replies
Answer Match 41.16%

Hi all,

many years I use 3rd part firewall software but now I am back to Windows Firewall.

When there is an inbound connection (a server that receive a connection from outside) Windows Firewall should notify and altert the user to accept (and make the rule) or decline the inbound connection.

That is the behaviour that I know Windows Firewall should have and I remember in the Win XP times that it was so.

Today I ran FILEZILLA FTP SERVER and I set it.

I ran a client in my LAN to connect to the server... NO ALERT... CAN'T CONNECT.

I ran another client (to be sure)... NO ALERT... CAN'T CONNECT.

So I make myself the rule for the service and... IT'S CONNECTED!!!

So firewall why didn't alert when it receive a connection???

Thank you...

More replies
Answer Match 41.16%

Hello,
For the past couple days I have malwarebyte messages about inbound and outbound concetions though internet explorer.exe.
How should I fix this ?
Edit:
Something is keep generating .DLL files in C:\Programdata\Microsift\secure\tem\.
Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Intel(R) Core(TM) i3-3217U CPU @ 1.80GHz, Intel64 Family 6 Model 58 Stepping 9
Processor Count: 4
RAM: 8079 Mb
Graphics Card: Intel(R) HD Graphics 4000, -1984 Mb
Hard Drives: C: Total - 154080 MB, Free - 67060 MB; D: Total - 57238 MB, Free - 16708 MB; E: Total - 322400 MB, Free - 265420 MB;
Motherboard: Dell Inc., 0N1XH2
Antivirus: avast! Antivirus, Updated and Enabled
 

A:Malwarebyte 'Inbound and outbound connection blocked' mesage

I assume you mean this path?

C:\Programdata\Microsoft\secure\icons\temp

You should start a new thread in the Virus & Other Malware Removal forum for help with this.

In the meantime, I'm closing this one.
 

1 more replies
Answer Match 41.16%

Hi,
I've got a problem that is driving me absolutely crazy - no matter what I do, I just plain cannot connect to my laptop. I have a few services running (e.g. VNC), but every local port to which try to connect from outside (mainly my internal network) the laptop itself results in "connection timed out". I can't even ping the machine.

I've already tried anything that I could think of - decativate the firewall, explicitly punching holes into the firewall - uninstall my anti virus (even though it contains no firewall) start in safe mode. Nothing helps. Windows doesn't log anything regarding incoming connections, even if a add an explicit log rule to the Win7 firewall. To my laptop, it looks like no packet for an incomung connection ever reaches it.

Furthermore, booting a Linux from USB stick results in perfectly open ports for VNC, SSH etc. using the same basic network configuration. So it no hardware problem.

I'm completely out of ideas, which is why i ask for help here. :-) -- Does anybody have any idea where to look for the problem or its solution? Is this a known problem? How could it be fixed? I'm ready and willing to try almost anthing (short of plainly reinstalling, as I haven't got enuogh time for this, expecially considering the sh*tload of programs I'd have to reinstall).

Thanks in advance for any help in the matter.
Greetings, Michael.

A:Crazy problem: No inbound connections possible, even without firewall! (Win 7pro)

One quick addition: if you need/want to see any special log files, configuration info etc., I'll happily provide it. I just have no idea at the moment what could be of interest in order to solve this problem.

Cheers again, Michael.

5 more replies
Answer Match 41.16%

I have a Windows Vista X64 and a few running XP connected in the same network. I can ping from Vista Workstation to XP, file and print share, vnc, etc.. but not the other way. When I Ping from XP to Vista I get a Requested Time Out, either by IP or host name. Turned off both firewalls and even ensured all necessary ports opened on McAfee, so I know not a fiirewall issue. This was working before, not sure if Vista messed me up again... and did some update which I need to modify the RegEdit but now sure. Been bugging me for a while and I just can't seem to find a fix. Any help is much appreciated. I know there is something on the Vista blocking request inbound but I just can't seem to figure it out.

Flake

A:Visita issues allowing ICMP and other inbound requests

The problem might be that to discover information about devices, Windows Vista uses a new protocol, called Link Layer Topology Discovery. LLTD is built into any Windows Vista PC, which is why the Vista computers show up. However, LLTD IS NOT built into Windows XP, which is why Vista machines may not show up properly, or not be "there" at all on the XP machine.

You might can fix the problem by downloading and installing the Layer Topology Discovery Responder for XP from Microsoft here...

http://www.microsoft.com/downloads/d...displaylang=en

Install it on the XP computers and your Windows XP PC will show the Vista computers. This may/may not fix your problem but from my expierience, and the information you provided, this is the solution I come up with off the top of my head.

2 more replies
Answer Match 41.16%

I have a standalone PC connected via POP3 and Outlook 2003 to my internet mail provider (Bellsouth). I set up a new email account, imported my folders (backed up via .PST from another PC) and established the POP3 connection. I can see mail in the Inbox on the server and Outlook says it is sending/receiving. When it is done, the mail is gone from the server and is not in my Outlook Inbox. I've researched this and all of the solutions seem to be geared to an Exchange environment. I don't have that - just a lone PC. I would greatly appreciate any help resolving this problem. I've already deleted the account and re-added it, to no avail.

Thanks.
 

More replies
Answer Match 40.74%

In the home computing environment (post windows 7), do software based inbound firewalls in many security suites or standalone give a false sense of security nowadays?

I've been at fault for this and assume other Windows based third party firewalls are somehow better than Windows built in firewall. To be honest though, is there much substance to back this up?

I know you could argue outbound effectiveness and ease of use, but in general...is it really necessary?

Thanks for your time!
 

A:Do third party inbound firewalls give a false sense of security?

motox781 said:





In the home computing environment (post windows 7), do software based inbound firewalls in many security suites or standalone give a false sense of security nowadays?

I've been at fault for this and assume other Windows based third party firewalls are somehow better than Windows built in firewall. To be honest though, is there much substance to back this up?

I know you could argue outbound effectiveness and ease of use, but in general...is it really necessary?

Thanks for your time!Click to expand...

If you are behind NAT router with stateful packet inspection, then no.

If you have laptop and use public wifi, then yes.

Unfortunately, there are a lot of things enabled in Windows Firewall as it is shipped from Windows that should be tweaked for maximum security.

There was a recent post there at MT about McAfee. There was a link inside the article to a guide on how to disable some things for max security.

@frogboy posted that McAfee article.
 

2 more replies
Answer Match 40.74%

XP Home, Outlook 2000

inbound mail is being directed to established folders using Wizard ok, but I also get a copy in the inbox.

Thx again
 

A:Solved: OL 2000 inbound mail to folder dupl to inbox

6 more replies
Answer Match 40.74%

Hello,
For the past couple days I have malwarebyte messages about inbound and outbound concetions though internet explorer.exe.
How should I fix this ?
Edit:
Something is keep generating .DLL files in C:\Programdata\Microsift\secure\tem\.
Eset online scanner keeps finding sathurbot in iconcachehelper.dll
 

A:Solved: Malwarebytes keep blocking outboun and inbound anouthorized conections

Do not try and clean the system yourself
You need help from one of our specialists
The detection by Eset
http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Win64/Sathurbot
is only I think a part of the problem
Follow please the instructions here and open a topic with the requested logs attached
http://forums.techguy.org/virus-other-malware-removal/943214-everyone-must-read-before-posting.html
 

1 more replies
Answer Match 40.32%

Hi
we have put in place corporate wifi and we have been experiencing a problem where the laptop would not obtain a DHCP address when trying to connect to corporate wi-fi

The problems appears to be windows firewall blocking the inbound DHCP request as the defined network at that point is either public or private. If we then also plugged the network cable in the network would change to domain and would then change the firewall
policy from standard to domain and in doing so allow the DHCP to work and the client would get an IP.

we have a centralized DHCP server and we use relay agents on the routers at sites to help issue the DHCP addresses

has anyone come across this before and if so what Inbound exception did you put in. I was planning on using GPO to push the exception out and set this on the standard firewall policy.

This is what i was thinking of adding into the standard firewall policy.

67:UDP:10.226.192.1,10.226.194.1,10.226.196.1,10.226.197.1,10.226.198.1,10.226.199.1,10.226.200.1,10.226.201.1,10.226.202.1,10.226.203.1,10.226.204.1,10.226.205.1,10.226.206.1,10.226.207.1,10.226.208.1,10.226.209.1,10.226.210.1,10.226.212.1,10.226.214.1,10.226.215.1,10.226.216.1,10.226.218.1,10.226.220.1,10.226.28.202,10.226.40.202:enabled:Inbound DHCP


68:UDP:10.226.192.1,10.226.194.1,10.226.196.1,10.226.197.1,10.226.198.1,10.226.199.1,10.226.200.1,10.226.201.1,10.226.202.1,10.226.203.1,10.226.204.1,10.226.205.1,10.226.206.1,10.226.207.1,10.226.208.1,10.226.209.1,10... Read more

More replies
Answer Match 39.9%

today i was browsing the net and malwarebyte popped up showing and outbound connection blocked. After that it continuously popped up showing the same ip address and inbound connection blocked. i searched on the internet and removed all p2p software like utorrent. i am unsure if this has solved the problem..
 

More replies
Answer Match 39.48%

Hi,

I just discovered that a non-admin MS account on Windows 8.1 can install WinApps from the Store. And that app can install an inbound rule in the Windows Firewall.

To duplicate my findings, create a hotmail account. Then in Windows 8.1 create a non-admin MS account using that hotmail acc just created. Then go to Windows Store and install Energetic Software Free Torrent. Windows 8.1 will not only install that app, but also create an inbound rule allowing traffic to that package.

That app is now a server running on my machine, accepting attacks and all sorts of nastiness.

So I guess that MS is saying that admin accounts are now not required to install software and modify firewall rules.
 

A:Sacrebleu, non-admin Win8 MS accounts can install apps and open inbound firewall rule

Update.

The reason why non-admin MS accounts can install Win Apps is because Win Apps have to be installed PER USER. That is, each MS Account user has to go to the Store to install her desired Win Apps, and that her installation is not active for other users of the same PC.

But by giving access to the Win Store to everyone, means that any MS account standard user can install Win Apps that modify the Windows Firewall, reducing the PC's security. I have also tried installing some Win App games, and they too create an inbound rule allowing incoming traffic thru the firewall. There are a lot of free stuff in the Win Store, and users will be tempted to install them.

There are 3 solutions.

A) If you have Win 8.1 Pro, you can use Local Security Policy to block the creation of MS Accounts. This means your users cannot use the default built-in Winapps instant messaging app or calendar. or Store, because you need a MS account to use them.

B) You can block access to the Win Store with a registry entry to disable the Win Store.Open Regedit, and navigate to
HKLM\Software\Policies\Microsoft\WindowsStore
Make a Dword32 named RemoveWindowsStore
And set the value to 1.

Setting RemoveWindowsStore to 0 will reactivate the Store. So you can get WinApp updates for the default built-in WinApps.

C) You can let things be as MS desires, and let MS account standard account users install their own Win Apps, But you regularly go inspect Administrative Tools > Windows Firewall with Advan... Read more

1 more replies
Answer Match 36.96%

I made an Inbound Rule for a program which listens on port 1234.

The rule is defined as follows:
Name: testing
Group: (blank)
Profile: All
Enabled: Yes
Action: Allow
Override: No
Local Address: Any
Remote Address: Any
Protocol: Any
Local Port: Any
Remote Port: Any
Authorized Users: Any
Authorized Computers: Any
Authorized Local Principals: Any
Local User Owner: Any
Application Package: Any

With so many things set to "Any", I'd expect this to work. It doesn't. I get a timeout whenever I try to connect from another machine. I can connect correctly from the same (host) machine, however.

Log file on host machine showing dropped connections from remote machine on the same network (host is 192.168.1.12, remote is 192.168.1.11):
2016-05-26 21:40:23 DROP TCP 192.168.1.11 192.168.1.12 49462 1234 52 S 1792208054 0 8192 - - - RECEIVE
2016-05-26 21:40:24 DROP TCP 192.168.1.11 192.168.1.12 49463 1234 52 S 2144268134 0 8192 - - - RECEIVE
2016-05-26 21:40:26 DROP TCP 192.168.1.11 192.168.1.12 49462 1234 52 S 1792208054 0 8192 - - - RECEIVE
2016-05-26 21:40:27 DROP TCP 192.168.1.11 192.168.1.12 49463 1234 52 S 2144268134 0 8192 - - - RECEIVE
2016-05-26 21:40:32 DROP TCP 192.168.1.11 192.168.1.12 49462 1234 48 S 1792208054 0 8192 - - - RECEIVE
2016-05-26 21:40:33 DROP TCP 192.168.1.11 192.168.1.12 49463 1234 48 S 2144268134 0 8192 - - - RECEIVE
2016-05-26 21:40:44 DROP TCP 192.168.1.11 192.168.1.12 49464 1234 52 S 3317763335 0 8192 - - - RECEIVE
201... Read more

More replies
Answer Match 36.54%
Q: Events?

Where do I find what programs were launched & what settings where changed at what date and time?

A:Events?

event viewer (type event viewer in search) But there is ton, and tons of info.
Ken

1 more replies
Answer Match 36.54%

can someone explain what are the system Events log for and how does one correct the events that are occuring.

A:Events????

Hi -

Info from Microsoft on the Event Viewer -

http://windows.microsoft.com/en-US/w...s-Event-Viewer

http://windows.microsoft.com/en-US/w...n-Event-Viewer

There are 131 different event logs in this Windows 7 x64 system.

Regards. . .

jcgriff2

`

1 more replies
Answer Match 36.54%
Q: Events

can someone explain what are the system Events log for and how does one correct the events that are occuring.
 

A:Events

The event log is simply to record when something significant happens on your system, which can be anything from a crashed program or BSOD to booting the computer to a failed or successful login. It's a diagnostic tool so that when you have a problem you can find out some more information about what happened around that time. Talking about correcting the event depends upon what the event was; many (such as successful boots) don't need correcting.

If you have a particular and recurrent error feel free to ask about it specifically.
 

1 more replies
Answer Match 36.12%

This shows up in my log at least once a day under DNS Client Events, Event ID 1014. Name Resolution for the name www.jameswolcott.com timed out after none of the configured DNS servers responded.

A:Administrative Events Log

  
Quote: Originally Posted by squid13


This shows up in my log at least once a day under DNS Client Events, Event ID 1014. Name Resolution for the name www.jameswolcott.com timed out after none of the configured DNS servers responded.


Hi squid and welcome

Thats a fairly common event. Just means that the DNS server didnt respond quickly enough and the event was logged. Not an error maybe informational

Ken

2 more replies
Answer Match 36.12%

From the log.

Name resolution for the name sceneaccess.eu timed out after none of the configured DNS servers responded.

or this

Your computer was not assigned an address from the network (by the DHCP Server) for the Network Card with network address 0x902B3461508E. The following error occurred: 0x79. Your computer will continue to try and obtain an address on its own from the network address (DHCP) server.

This is happening on many websites

More replies
Answer Match 36.12%

Greetings,

Help! My son somehow got hold of some work emails of mine that are confidential. Does anyone have any idea how he may have got hold of them? We don't want to "password" the computer 'cos the whole family uses it. We all clear temp internet files and clear the history of sites visited. but somehow ...! Help.

A:How To Locate A Log Of Events

Hi there mike.

Well, firstly, I'm going to assume that you're using a e-mail client. (Such as Mozilla Thunderbird, Netscape, something like that) as oppose to using the browser to view the e-mails.
I strongly discourage using a e-mail client without a password protection on it if it's a shared computer, because then it's quite easy for someone to access your e-mails, and the only way to check to see if they did is if the e-mail is newly recieved and you can see that it's been read or unread, although it's easy to tag them as read/unread without even reading them.

So my first suggestion in keeping your e-mails confidential is accessing them using the browser and checking to make sure that the password isn't saved. Otherwise, use the e-mail client only make sure that e-mails cannot be viewed without entering the password to their account.

I hope that helps,
nyiddle.

6 more replies
Answer Match 36.12%

I get a ton of these errors every day.

Warning 9/13/2010 8:55:51 AM DNS Client Events 1014 None
Name resolution for the name assets.espn.go.com timed out after none of the configured DNS servers responded.
Warning 9/12/2010 5:58:20 PM DNS Client Events 1014 None
Name resolution for the name 45.206.138.24.in-addr.arpa timed out after none of the configured DNS servers responded.
Warning 9/12/2010 5:53:06 PM DNS Client Events 1014 None
Name resolution for the name 61.25.156.94.in-addr.arpa timed out after none of the configured DNS servers responded.
Warning 9/12/2010 5:52:50 PM DNS Client Events 1014 None
Name resolution for the name 255.1.168.192.in-addr.arpa timed out after none of the configured DNS servers responded.
Warning 9/12/2010 5:52:45 PM DNS Client Events 1014 None
Name resolution for the name login.messaging.aol.com timed out after none of the configured DNS servers responded.
Warning 9/12/2010 5:52:41 PM DNS Client Events 1014 None
Name resolution for the name isatap.gateway.2wire.net timed out after none of the configured DNS servers responded.
Warning 9/12/2010 5:45:58 PM DNS Client Events 1014 None
Name resolution for the name isatap.gateway.2wire.net timed out after none of the configured DNS servers responded.
Warning 9/12/2010 2:24:40 PM DNS Client Events 1014 None
Name resolution for the name js.microsoft.com timed out after none of the configured DNS... Read more

A:DNS Client Events

What firewall and Anti-virus are you running?

9 more replies
Answer Match 36.12%

hi good people,I have a prob with my dvd-rw drive "E" it is just a no go area nothing happens when i put a dvd -r in although i can watch and play dvd and cd on dvd drive "D"Have checked out computer on event viewer/system and get a red cross error! Source CD ROM. Reads,Event id #7
The device\cd rom0. has bad block
Also when I bring up dvd rw drive "E"properties used space appears to be full and doesnt show any free space with bytes 0 on used and free space same goes for dvd drive"D"
There is no action atall in my DVD-RW.
Open to any assistance and much appreciated!
CHEERS!

A:system events

A start, http://www.eventid.net/display.asp?eventid...rom&phase=1.Louis

1 more replies
Answer Match 36.12%

I upgraded recently from Vista to Windows 7 in-place.

Every other day, I wake up in the morning to find that my PC has rebooted.

Looking in the event logs for an explanation, I see that my system log doesn't show any new entries since the middle of June. For two months, my system hasn't recorded any new event logs. This obviously started happening while still running Vista.

Any ideas? TIA.

A:No new events in system log

Open event viewer, on the right hand side you will find the "Actions" column, click on properties > Make sure that the enable logging box is checked.

That should do it. Tell me if it doesn't.

7 more replies
Answer Match 36.12%

All of my sounds work fine, except the events. No sound for any events. I have used the control panel to try to set them. Even the test does not make sound.

A:No sound for my events

I found the answer

2 more replies
Answer Match 36.12%

Getting this in event monitor.
I was able to disable sptd in reg but the others are a little more detailed. Googleing has yeilded little so far. Would like to know which software triggers event, is there a way to discover?

A:Events Redflags

Come on now, none of you software gurus has any thing to say?

9 more replies
Answer Match 36.12%

Visit the JavaScript Events thread in the Web Design & Development forum.

-- Tom
 

More replies
Answer Match 36.12%

I don't know if this is the right forum for this question, so move if needed
I have a Sony Clie and sync it with OL2000, but it does not pickup reoccurring events, I was wondering if anyone knew if there was a setting in the clie or Outlook programs so that the reoccurring events show up.

In case it matters, Outlook 2000 thru Exchange 2000 server.

Thanks in advance
 

More replies
Answer Match 36.12%

Hi,

Ever since I installed KB3194496 on the 30th of September I have been getting AppReadiness 10 and 214 in the event viewer. Everything seems to be working ok.

I have seen other posts about this (on other forums) but no solutions.

Any suggestions, please?

Rob.

PS: 2 of each, at each startup.

More replies
Answer Match 36.12%

Hey everyone! First time here. Went through quite a few posts but couldn't come across the exact issue I'm having and I hope someone can help.

SYS - Dell XPS 400, Windows XP pro, Logitech 3200 wireless K&M, Dell Surround Sound system.

Old Keyboard and Mouse (K&M) went inop. Logitech was awesome and they replaced both of them free of charge. Now the issue...(be easy on me - I'm just "OK" with this stuff) ;~')

After installing the new software for the K&M, all of my event sounds stopped working. Logitech has been great in trying to assist with this issue but to no resolution. I can play a video, play music and I can hear all of my games as well but none of my event sounds are working at all.

I did a clean uninstall/reinstall of the Logitech software twice, the last one being from their website via an email the tech sent me. Still nothing. Everything with the settings for my sounds appears to be okay and I've switched between the themes including back to the Window's default settings and still nothing.

When I try to play a .wav (or whatever) from the control panel (sounds and audio devices), I get a warning that says that it can't play the sound that my sound card may be in use. ????? However, if I access the same sound (actually any sound) via Windows Explorer, it will play fine.

Can anyone help?!
 

More replies
Answer Match 36.12%

I get DNS Client events on event viewer and I loose connnection please look at my 2 forums in HP & Microsoft first have all the info you need so I dont have to type all of it in again: MY HP FORUMS POST: Wifi Adapter Issues - HP Support Forum - 5381113
Microsoft post: http://answers.microsoft.com/en-us/w...7-bf60d6a07c33
Also tried factory reset sfc scannow does not find anything also DISM scanhealth and restore health. Also I do not have the latest network card since it causes BSODS (the update comes from windows update not manufacturer website) the older driver versions of network card Realtek RTL8723BE from manufactrers website do not cause BSODS

A:DNS Client events. Tried nearly everything to fix it

Hi, I own a HP device as well, it's going to have a built in network diagnostic as well as the Windows troubleshooting. If that doesn't fix it,
change the DNS servers to the following IP's (these are google's DNS servers)
Preferred: 8.8.8.8
Alternative: 8.8.4.4

6 more replies
Answer Match 36.12%

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft® Windows Vista™ Home Premium, Service Pack 2, 32 bit
Processor: AMD Athlon(tm) 64 X2 Dual Core Processor 4600+, x64 Family 15 Model 75 Stepping 2
Processor Count: 2
RAM: 1917 Mb
Graphics Card: NVIDIA GeForce 6150 LE, 128 Mb
Hard Drives: C: Total - 295258 MB, Free - 235757 MB; D: Total - 9985 MB, Free - 4627 MB;
Motherboard: ELITEGROUP, C51PVGM-M
Antivirus: Lavasoft Ad-Aware, Updated and Enabled

How do I clear a ton of Administrative Events - errors and warnings
 

A:administrative events

6 more replies
Answer Match 36.12%

Could someone please advise me on restoring sound events in windows xp pro. I can play them via real player and I can also play all other media, but sound events are silent. I have gone through the trouble shooter suggestions but things are still the same.
thanks
 

A:sound events

13 more replies
Answer Match 36.12%

I've just installed 1.6 LWG on a number of DCs, all with the same CPU and mem config and on one of them it is reporting that it is dropping events. CPU nor memory is under any visible strain. All are within close proximity of the ATA center. Any ideas?

More replies
Answer Match 36.12%

Hi,
1. Is there a way to setup ATA to send email notifications to someone when certain events occur? e.g. pass-the-hash has just happened, notify the admin
2. Is there a way to setup ATA to execute something when a certain event occurs? e.g. execute a custom powershell script when pass-the-hash is detected
thank you,
sk

More replies
Answer Match 36.12%

This turned up in cookies to be deleted when I ran ccleaner a few days ago.

I found it odd since I don't accept cookies or 3rd party cookies in Firefox except the ones that I type in to be allowed. When I push the show cookies button in Firefox it does not appear there. I decided to block it anyway in Firefox and thought that worked but it still seems to pop up sometimes when I run ccleaner.

I've ran Spybot S&D,Superantispyware,Malwarebytes Anti-Malware and Microsoft Security Essentials and get nothing.

I've done some searches on it and got nothing informative. I can't really tell if this thing is harmless or not.

I have another laptop with a similar set up except its Windows 7 32bit visit alot of the same sites on it but no events.webflowmetrics.com cookie.

Even if it is harmless(I HOPE!) how do I get rid of it? Thanks in advance!

A:What is events.webmetrics.com?

Anybody? I had the wrong name. Its events.webflowmetrics.com

6 more replies
Answer Match 36.12%

hi there
can someone please tell me what this is
it was in my event viewer
Critical 05/06/2008 13:23:20 Kernel-Power 41 None .................................................and is this something i need to worry about or is it just one of those things that happen???the details read .
the last sleep transition was unsuccessful.this error could be caused if the system stopped responding ,failed,or lost power during the sleep transition
any help or advice would be great
thanks

A:critical events i need help please

Can you drill down into it and get more information. Probably sleep failed because a process was still running.

3 more replies
Answer Match 36.12%

I've built my father a new PC for Christmas, it's all set up and works nicely - however he has a habit of carelessly installing apps/drivers/codecs and changing settings without any care or proper understanding of the implications.

The result usually ends up with a PC riddled with bloatware, spyware etc and takes an age to do anything.

Please can someone suggest some freeware I can install that monitors daily usage milestones, so I can read reports of what he's installed or changed, when he starts complaining that the computer is 'so slow and unstable'?

It's running XP Pro, and I'm aware there's a built in event viewer, but I find this very convoluted to navigate and find meaningful reports.

More replies
Answer Match 36.12%

I am running Win 7 Pro, 32 bits

I was trying to run down a problem with Windows Explorer crashing and wanted to check the Events Log. When I went to check it it I got this:

Attachment 95544

I then check Services and got this:

Attachment 95545

There is no Events Viewer service shown, or I don't know how it is listed.

I need a little help to get Events Viewer running.

Thank you

A:Events Viewer

  
Quote: Originally Posted by huffman


I am running Win 7 Pro, 32 bits

I was trying to run down a problem with Windows Explorer crashing and wanted to check the Events Log. When I went to check it it I got this:

Attachment 95544

I then check Services and got this:

Attachment 95545

There is no Events Viewer service shown, or I don't know how it is listed.

I need a little help to get Events Viewer running.

Thank you


where did you get your win 77 image from?

do you have a backup from before the problem?

6 more replies
Answer Match 36.12%

How do I clear Administrative Events logs? I can clear the other logs but not the admin. logs...

A:Administrative Events

  
Quote: Originally Posted by M YANCEY


How do I clear Administrative Events logs? I can clear the other logs but not the admin. logs...


Hello M Yancey & welcome,
Check out this Tutorial to see if can help you.
Event Viewer One Click Clear

5 more replies
Answer Match 36.12%

After reading Zazula's post on optimising slow start-up, I followed procedures via eventvwr.msc and discovered that on 12th Aug 07 I had aquired, within 30mins, literally hundreds of errors from Sophus anti-virus which I had been trying to download without success.

Any advice?

teddyboy.

A:error events

Quote:





Originally Posted by teddyboy


After reading Zazula's post on optimising slow start-up, I followed procedures via eventvwr.msc and discovered that on 12th Aug 07 I had aquired, within 30mins, literally hundreds of errors from Sophus anti-virus which I had been trying to download without success.

Any advice?

teddyboy.




Nobody has replied to my post

9 more replies
Answer Match 36.12%

Curiosity has finally gotten the best of me. Whenever I check my firewall events log I often see a long list of "medium" rated blocked events similar to this:

Program: Generic Host
Protocol: UDP
Destination IP: 192.168.0.101
Direction: Incoming
Action Taken: Blocked
Source DNS: (typically) rs1.mdfrd.or.charter.com OR rs1.knwk.or.charter.com
Destination DNS: VAIO-PCVRS530G

The "Source DNS" is my ISP (Charter Communications) and of course the "Destination DNS" is my PC. Typically these types of events are **always** blocked by my firewall which is the current version of Zone Alarm.

Basically I'm just wondering what these events represent and should I consider adding them to my "trusted" zone?

Thanks,
-Mike
 

A:Blocked UDP Events

I would not worry about this. User Datagram Protocol (UDP) is not connection based like TCP/IP. It basically just provides. A lot of programs use UDP to pass generic data packets, or datagrams, from one computer to the other on a network.
 

3 more replies