Several applications are trying to access the internet to specific ip address in vista only! ref/eDN

[dennis]

The address are 10.0.0.138 which is a gateway address on the router and the
224.0.0.2 where is unknown to us internet address. This is happening also
with application that ARE NOT internet applications! In particular, a
specific program that had never requested internet access in xp pro now in
vista requires access. This mysterious activity found by zone alarm
firewall.

So we have the same applications with different system with different
behavior. I think that 99% system is responsible for this. Of course there
is antivirus installed, updated etc. The application's files are identical
with the original files, so cannot be virus activity.

Please give me more information about this issue.

Kind regards
Dennis Theotocatos
Programmer
Praxi LTD

 

[mayayana]

Did you know that you can research the IP
at www.domaintools.com? Enter it into the
whois search for a full listing.

Your 224.0.0.2 returns iana.org. Maybe the
software is just calling there for DNS service.
In that case, the question would be what
domain it's looking up. You might be able to
figure it out by lony letting Zone Alarm let the
program go out on a case by case basis. But you
may not have a chance to say no to the final
destination if you've said yes to iana.org.

Unfortunately, a great deal of software is
spyware these days, insofar as it goes online
without asking and without telling you the
purpose. I've seen Norton System Works try
to go out during install. Then when the cable
plug was pulled it just hung for awhile, never
once showing a message saying that it was
attempting online access! ... Opera calls home
on first run without telling you... etc.

 

[Bistey Csaba]

I think those are ICMP Router Discovery packets.
To make it easier to understand is like Vista yelling where the hack is
a router that can route my traffic (that is done via 224.0.0.2
(all-routers)) if there is a router supporting ICMP Router Discovery it
yells back here iam please use me to reach the internet (i wanna be
your default route).

For more technical info you should check RFC or Microsoft site:
http://www.microsoft.com/technet/pr...rv/reskit/intwork/inae_ips_oliq.mspx?mfr=true
http://www.faqs.org/rfcs/rfc1256.html

You can tell Vista stop yelling by registry modification
PerformRouterDiscovery) for details see:

http://download.microsoft.com/download/c/2/6/c26893a6-46c7-4b5c-b287-830216597340/TCPIP_Reg.doc

Csaba

 

[dennis]

The problem is that applications that are developed by me, are trying to
access the internet. These programs don't even a letter about network
performance. I tried this, a copy an entire application from the vista
terminal to a terminal with win xp pro (with zone alarm), the copy doesn't
attempt to access the internet.

Take care
Dennis

 

[dennis]

whazzup? no response?

Dennis

I think those are ICMP Router Discovery packets.
To make it easier to understand is like Vista yelling where the hack is a
router that can route my traffic (that is done via 224.0.0.2
(all-routers)) if there is a router supporting ICMP Router Discovery it
yells back here iam please use me to reach the internet (i wanna be your
default route).

For more technical info you should check RFC or Microsoft site:
http://www.microsoft.com/technet/pr...rv/reskit/intwork/inae_ips_oliq.mspx?mfr=true
http://www.faqs.org/rfcs/rfc1256.html

You can tell Vista stop yelling by registry modification
PerformRouterDiscovery) for details see:

http://download.microsoft.com/download/c/2/6/c26893a6-46c7-4b5c-b287-830216597340/TCPIP_Reg.doc

Csaba