Question about Internet Information Services (inetinfo.exe)

[Tom Barclay]

When I'm online, my software firewall (Sygate) keeps popping messages up
informing me that inetinfo.exe is either accessing the Internet, or that a
site (usually a different one each time) is trying to access my system
through Internet Information Services. System info below:

I am running WinXP Pro (with SP1)
Using a dial up connection
Not connected to any network, and have networking disabled.
Antivirus up to date (checked daily)
Spybot and Ad-Aware find nothing (both up to date, and checked weekly)
Cookies blocked unless they're absolutely necessary.

Generally I disallow the access, but because I really don't know what the
program is doing, or why it wants to access the Internet (or allow access
from a remote server), I'm a little leery of permanently disallowing it. Can
anyone shed some light on why it's constantly being accessed (2 or 3
times/minute), and if I can disallow it permanently without any problems?
All I've been able to find out is that it has something to do with debugging
(I also have Machine Debug Manager disabled).

 

[Haus]

Hello Tom
You might want to check this out
http://www.pestpatrol.com/PestInfo/i/inetinfo_exe_vulnerability.asp#Detection and Removal

 

[Tom Barclay]

Hello Tom
You might want to check this out
http://www.pestpatrol.com/PestInfo/i/inetinfo_exe_vulnerability.asp#Detection and Removal

Haus
Thanks for the reply. Here's an update for information purposes. I did a
scan with the PestScan program and it came up clean. I also found a program
called TCPView, and monitored the online activity with it. It kept referring
to IIS, which I have to use for FTP transfer when updating my website. After
disabling IIS, there was no more inetinfo.exe access. The problem seems to
have disappeared, and I guess I'll have to reactivate IIS whenever I need to
update the website.