After Instaling

Windows XP Microsoft .NET Framework 3.0: x86 (KB928416) Friday, March 02,
2007 Microsoft Update
Windows XP Root Certificates Update Friday, March 02, 2007 Microsoft Update
Windows Defender Definition Update for Windows Defender - KB915597
(Definition 1.15.2329.4) Friday, March 02, 2007 Microsoft Update
Windows XP Windows Genuine Advantage Notification (KB905474)

Automatic updates prompted me to iinstall:
Windows XP February 2007 CardSpace Update for Windows XP (KB925720) Friday,
March 02, 2007 Automatic Updates
While this was installing, Windows defender popped up with:
Summary:
System Configuration change occurred.

This agent monitors security related configuration changes made to Windows.

Detected changes:
New: 3041:UDP:*:Enabled:Windows Media Format SDK (IEXPLORE.EXE)
Original: Not available

firewallport (New):
HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\3041:UDP

Advice:
Permit this configuration change only if you trust its origin. It is
recommended that you run a quick scan if you choose to deny this change.

Checkpoint:
Firewall Port Exceptions

Category:
Configuration Change

I aasume this is OK but why wouldn't defender recognize either the publisher
or the change.?

It recognized the change, that's why Defender alerted. As for the publisher,
this can be easily faked. The change can be safely allowed.
--
Kevin


"brickken" wrote:

> After Instaling
>
> Windows XP Microsoft .NET Framework 3.0: x86 (KB928416) Friday, March 02,
> 2007 Microsoft Update
> Windows XP Root Certificates Update Friday, March 02, 2007 Microsoft Update
> Windows Defender Definition Update for Windows Defender - KB915597
> (Definition 1.15.2329.4) Friday, March 02, 2007 Microsoft Update
> Windows XP Windows Genuine Advantage Notification (KB905474)
>
> Automatic updates prompted me to iinstall:
> Windows XP February 2007 CardSpace Update for Windows XP (KB925720) Friday,
> March 02, 2007 Automatic Updates
> While this was installing, Windows defender popped up with:
> Summary:
> System Configuration change occurred.
>
> This agent monitors security related configuration changes made to Windows.
>
> Detected changes:
> New: 3041:UDP:*:Enabled:Windows Media Format SDK (IEXPLORE.EXE)
> Original: Not available
>
> firewallport (New):
> HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\\3041:UDP
>
> Advice:
> Permit this configuration change only if you trust its origin. It is
> recommended that you run a quick scan if you choose to deny this change.
>
> Checkpoint:
> Firewall Port Exceptions
>
> Category:
> Configuration Change
>
> I aasume this is OK but why wouldn't defender recognize either the publisher
> or the change.?