Re: Why is Win Explorer accessing the Net?

From: Lassi Hippeläinen (lassi.hippelainen_at_welho.compromised.invalid)
Date: 12/25/03

  • Next message: Peter James: "Microsoft Help Centre message"
    Date: Thu, 25 Dec 2003 10:13:55 +0200
    
    

    chris@nospam.com wrote:

    > Isn't it a bit odd that Explorer is the process reported doing the
    > discovery? Doesn't this discovery occur when tcpip or the ppp comes
    > up which may happen before explorer is running?

    It is Microsoft policy that Explorer cannot be separated from the
    operating system. They claimed that in court, so they must live by it...
     
    > Of course, it won't be long before the adware/spyware programs learn
    > how to use the built-in system calls instead of directly trying to go
    > the network. As an example, the services.exe can handle most of the
    > system calls a spyware program would make and the software firewall
    > would just see the generic services.exe .

    Something like the "Windows shatter attack"?

    -- Lassi


  • Next message: Peter James: "Microsoft Help Centre message"

    Relevant Pages

    • Re: Why is Win Explorer accessing the Net?
      ... Doesn't this discovery occur when tcpip or the ppp comes ... It is Microsoft policy that Explorer cannot be separated from the ... it won't be long before the adware/spyware programs learn ...
      (comp.security.firewalls)
    • Re: Why is Win Explorer accessing the Net?
      ... Doesn't this discovery occur when tcpip or the ppp comes ... It is Microsoft policy that Explorer cannot be separated from the ... it won't be long before the adware/spyware programs learn ...
      (comp.security.misc)
    • Re: Why is Win Explorer accessing the Net?
      ... >> Isn't it a bit odd that Explorer is the process reported doing the ... Doesn't this discovery occur when tcpip or the ppp comes ...
      (comp.security.firewalls)
    • Re: Why is Win Explorer accessing the Net?
      ... >> Isn't it a bit odd that Explorer is the process reported doing the ... Doesn't this discovery occur when tcpip or the ppp comes ...
      (alt.computer.security)
    • Re: Why is Win Explorer accessing the Net?
      ... >> Isn't it a bit odd that Explorer is the process reported doing the ... Doesn't this discovery occur when tcpip or the ppp comes ...
      (comp.security.misc)