dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
1619
share rss forum feed


Buddel
If it ain't broke, don't fix it.
Premium
join:2004-03-06
EU
kudos:3

ppcrlconfig600.bin and clientconfig.passport.net

Click for full size
Whenever I boot my computer, I find the following entry in my HostsServer log:
- Host name: clientconfig.passport.net
- Document: /ppcrlconfig600.bin
(screen shot attached)

The document ppcrlconfig600.bin may be related to ppcrlconfig600.dll, which I found here:
C:\ProgramData\Microsoft\IdentityCRL\production
I was under the impression that this is a legit file from Microsoft. However, I may be wrong because this file seems to try to "call home" to clientconfig.passport.net, which was added to hpHosts almost one year ago:
»hosts-file.net/default.asp?s=cli···port.net

Should I be worried? What can I do about it? I scanned my machine with all sorts of scanners, but they didn't find anything out of the ordinary. I also uploaded the file ppcrlconfig600.dll to VirusTotal, but it seems to clean.

Your help is very much appreciated. Thanks a lot in advance.

OS: Windows 7 Home Premium 32-bit


Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire
kudos:13

You probably saw this reference for years ago
»www.fanatic.net.nz/2006/01/27/go···is-here/

not really sure why do you need it on your config, what is on startup?

Cudni
--
"what we know we know the same, what we don't know, we don't know it differently."
Help yourself so God can help you.
Microsoft MVP, 2006 - 2011/12



Buddel
If it ain't broke, don't fix it.
Premium
join:2004-03-06
EU
kudos:3
reply to Buddel

I don't need it on my config. On the contrary, I want to get rid of it. I can't see anything out of the ordinary in my startup list.



Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire
kudos:13
reply to Buddel

Use MS AutoRuns util to see if anything rings a bell

Cudni



Buddel
If it ain't broke, don't fix it.
Premium
join:2004-03-06
EU
kudos:3

said by Cudni:

Use MS AutoRuns util to see if anything rings a bell

I did but I couldn't find anything suspicious. Really strange.


Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire
kudos:13

It doesn't have to be suspicious maybe some everyday app is invoking it as part of its operation

Cudni



Buddel
If it ain't broke, don't fix it.
Premium
join:2004-03-06
EU
kudos:3
reply to Buddel

I also think it's probably an everday app that keeps trying to connect to this site. It may even be one of the many Microsoft entries in my Autoruns log. Hm...



Dustyn
Premium
join:2003-02-26
Ontario, CAN
kudos:11
reply to Buddel

Who's the referrer if you enable that option?



Buddel
If it ain't broke, don't fix it.
Premium
join:2004-03-06
EU
kudos:3

Dustyn, I did enable that option, but HostsMan didn't show me a referrer. I have found out that it's got something to do with Windows Live. In my case, it's Windows Live Mail. I'm still trying to find out what I can disable in AutoRuns to prevent Windows Live from trying to access that web site.

There are quite a lot of Windows Live entries in AutoRuns. I want Windows Live Mail to work properly, so I cannot just disable each and every Windows Live file I find in AutoRuns. Does anybody have similar problems with Windows Live? If so, does anybody know by any chance what I need to disable in AutoRuns to stop Windows Live Mail from trying to get to that site?

You're help is very much appreciated - as always.