Question about Internet Information Services (inetinfo.exe)

  • Thread starter Thread starter Tom Barclay
  • Start date Start date
T

Tom Barclay

When I'm online, my software firewall (Sygate) keeps popping messages up
informing me that inetinfo.exe is either accessing the Internet, or that a
site (usually a different one each time) is trying to access my system
through Internet Information Services. System info below:

I am running WinXP Pro (with SP1)
Using a dial up connection
Not connected to any network, and have networking disabled.
Antivirus up to date (checked daily)
Spybot and Ad-Aware find nothing (both up to date, and checked weekly)
Cookies blocked unless they're absolutely necessary.

Generally I disallow the access, but because I really don't know what the
program is doing, or why it wants to access the Internet (or allow access
from a remote server), I'm a little leery of permanently disallowing it. Can
anyone shed some light on why it's constantly being accessed (2 or 3
times/minute), and if I can disallow it permanently without any problems?
All I've been able to find out is that it has something to do with debugging
(I also have Machine Debug Manager disabled).
 
Haus said:
Hello Tom
You might want to check this out
http://www.pestpatrol.com/PestInfo/i/inetinfo_exe_vulnerability.asp#Detection and Removal
Click to expand...

Haus
Thanks for the reply. Here's an update for information purposes. I did a
scan with the PestScan program and it came up clean. I also found a program
called TCPView, and monitored the online activity with it. It kept referring
to IIS, which I have to use for FTP transfer when updating my website. After
disabling IIS, there was no more inetinfo.exe access. The problem seems to
have disappeared, and I guess I'll have to reactivate IIS whenever I need to
update the website.
 
Back
Top