| ZAF - Windows Explorer trying to connect For some reason, the past few days after rebooting my system, the first time I try to access the internet I continue to get the message alert from ZAF
Do you want to allow Windows Explorer to access the Internet?
Destination IP: 192.168.2.1: DNS
Application: EXPLORER.EXE
Version: 4.72.3110.1
If I deny access, every attempt to access a web page results in 'This page cannot be displayed.' The permissions in ZAF will be set to 'ask' but the next time I try to access a page, ZA doesn't ask ... I just get the 'This page cannot be displayed' again.
I have to reboot my system in order to give permission for Windows Explorer to access the internet before I can view any web-pages. Why? Until a few days ago, I never had to give Windows Explorer permission for anything.
And what is it with the reference to ZAF in the earliest part of my post that results in ZAF being in a 'box' with a question mark beside it? If I click on the question mark, I have options to change ZAF to something else, but I don't want to!  |
|
| Although some ZA gurus say not to, I decided long ago to grant access to Windows Explorer (WE) -- so that websites and ftp sites requiring Net access will display from within WE.
I don't understand why you are suddenly getting prompts to let WE out; you might want to refresh your TrueVector database and start clean:
How do I refresh my TrueVector database files?
»www.zonelabs.com/store/content/s···10issues
Hope that helps, Good Luck! 
--
"But now abide faith, hope, love, these three; but the greatest of these is love." (1 Cor. 13:13) |
|
| reply to katarina
I agree with Randy, it may just be necessary. I understand you didn't used to have to allow it, so refreshing the ZA database is a good first step to ensure it's not a ZA corruption issue.
What version of Windows are you running? Windows Explorer and Internet Explorer get tied together a lot depending upon certain configuration options in Windows. If you never needed it before but do now then some configuration has changed. Unfortunately, it could be a few different things. Depending upon the version of Windows, IE and amount of memory on the system, this might be related: »support.microsoft.com/?kbid=240928
Oh, that "box" thing in the forum is just the new spell-checker on DSLR. Just ignore that if you don't want to spell check certain words.
--
Use the most powerful combo Firewall/AV/AT package available - "Common Sense" - It can be upgraded daily! |
|
 BubbaGIT-R-DONEPremium,MVM
join:2002-08-19
St. Andrews
 ·DIRECTV
 ·Pickwick Cablevi..
·Comcast
| reply to katarina
If ZAF has similar Program Control settings as ZAPro....you might find the following post by LowWaterMark  beneficial.
• explained -> Here
Edit: Slower than a motor scooter
--
"Well, butter my butt and call me a biscuit."
[text was edited by author 2003-10-29 17:58:38] |
|
BubbaGIT-R-DONEPremium,MVM
join:2002-08-19
St. Andrews Reviews:
·DIRECTV
·Pickwick Cablevi..
·Comcast
| reply to katarina
said by katarina:
And what is it with the reference to ZAF in the earliest part of my post that results in ZAF being in a 'box' with a question mark beside it? If I click on the question mark, I have options to change ZAF to something else, but I don't want to!
Why....that's one of our new spell check features and I like 
Thanks for the spellchecker!
--
"Well, butter my butt and call me a biscuit." |
|
| reply to katarina
Thanks for the reassurance that it's not anything sinister. I can relax now and check out the true vector theory when I have time later this evening. If I hadn't pretty much come to the conclusion that it was a mystery more than a security problem ... I would have shut the thing down until I had time to deal with it.
But ... since I was somewhat comfortable with it (although annoyed by it) I worked with it that way. Guess that could have been a problem in another situation that I hadn't assessed properly, but I was lucky this time??? |
|
ghost16825Use security metricsPremium
join:2003-08-26 | reply to katarina
Check the list of DNS servers for your ISP. If if isn't one of them you might want to check your system.
If it is your DNS which it sounds as though it is you should allow traffic both ways to this address remote port 53 for any application. |
|
IGGYNo Guru Just Here To HelpPremium,MVM
join:2001-03-30
Chatham, IL | reply to katarina
These links also can provide some help
»forums.zonelabs.com/zonelabs/boa···ge.id=58
»forums.zonelabs.com/zonelabs/boa···owAccess
»www.iggyz.com/book/firewall.html |
|
 KeizerI'M Your HuckleberryPremium,MVM
join:2003-01-20 | reply to katarina
I am not sure if this is a bug in XP or maybe zone alarm free, but heres the deal. If I click on Start>Search.....I will get a pop up from zone alarm free asking if I want to allow windows explorer to access the local net work, and also access the internet. Ok, now I have windows explorer in my zone alarm program control list with all question marks. So, I delete windows explorer from the program control list and go to event viewer, and select application and system, then exit. Now windows explorer will appear in the program control list again, without any popups from zone alarm. If I delete windows explorer again from the list, then go to event viewer, it shows up again in the list with no ZA popup asking me to give it permission. Now, if I re-boot, then go to event viewer, I not only get no ZA popups, but windows explorer does not appear in the program control list. But, if I click on "Search" again, I get the ZA popup asking if windows explorer can have access. Now its in the list again, and if I delete it, and go to event viewer, it appears again in the program control list with no ZA popup.
Basically I can click on event viewer all day long after a re-boot and windows explorer never appears in the ZA program control list. That is untill I access a program that uses windows explorer like search. I am not sure if this makes sence. I did try this on three different pc's all running XP and ZAF. Just wondering if it is normal?
Keizer |
|
 antiseriousThe Future ain't what it used to bePremium
join:2001-12-12
Scranton, PA | reply to katarina
... Not sure what O/S you use, but when this happened to me (W98SE) this tip fixed it ...
Check this KEY in the registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess
It should have a value of "yes" if it doesn't change it to yes REBOOT, then remove authorization for explorer from ZA and re-authorize Iexplore.
... hope this helps ...
--
... "Sometimes you're the Bird ... sometimes you're the Windshield" ... |
|
| reply to Keizer
Keizer, I think this has to do with whether or not a new instance of a program is started. Once ZA has dealt with the current process instance of a program, (the first time it tries to access the network), until that program is closed or a new instance is open, ZA has "cached" (if you will), the answer to the permission alert question.
Windows Explorer remains running in the sequence of events you are describing - ie. it is the same process and program combo until you reboot. Now, if you want to retest and actually close Explorer and start a new one, it may act differently. (You can close Explorer by killing the Explorer process in the task manager on XP, then using task manager to start a new copy of Explorer.)
I'm away from home and don't have my XP system so I can't test or document any of this, but it might make an interesting test for you to try. I'd expect the newly started Explorer instance to prompt the same way it occurs for you now after you restart.
--
Use the most powerful combo Firewall/AV/AT package available - "Common Sense" - It can be upgraded daily!
[text was edited by author 2003-10-29 21:04:27] |
|
|
|
KeizerI'M Your HuckleberryPremium,MVM
join:2003-01-20 | reply to katarina
LowWaterMark, thanks for the reply. I wonder what the connection is between event viewer, and windows explorer. Like I mentioned, after re-boot, I can access event viewer and never get a windows explorer popup from ZA. I will fiddle with it some more.
Keizer |
|
| reply to Randy Bell
said by Randy Bell:
How do I refresh my TrueVector database files?
»www.zonelabs.com/store/content/s···10issues
Tried it ... no go. Starting fresh ... WE instead of IE asks for access to the internet.
This time, the destination IP is 127.0.0.1: Port 1035 instead of 192.168.2.1: DNS
What exactly does CCAPP do?
When I deleted the Internet Logs and rebooted (without ZA loading on startup) NAV2003 didn't appear in the system tray (but CCAPP was in the "close program" box.)
When I manually started ZAF, CCAPP wanted access to the internet. As soon as I allowed it, NAV2003 appeared in the system tray. What does that mean? If NAV is not in the system tray, is it not running ... or is being in the system tray just 'for looks' (or my convenience?)
And should ZA not giving CCAPP permission to access the internet prevent my sending/receiving email through Outlook? I'd swear that in this tangled mess, at one point, when I did NOT give CCAPP access, that every time I tried to use Outlook I got a message stating that the TCP IP connection was unexpectedly terminated by the server. Once CCAPP got what it wanted, I had email access again. |
|
| said by katarina:
What exactly does CCAPP do?
See: Information about stopping ccApp.exe from loading at startup
quote:
ccApp is an important part of the protection that Norton AntiVirus (NAV) or Norton Internet Security (NIS) provides and should not be disabled at startup.
ccApp.exe is the common hosting application that is used by both NAV and NIS. It is responsible for calling the different program features in NAV and NIS. For example, in NAV, if Auto-Protect and Email Scanning are enabled, then ccApp.exe makes sure that those programs are running. If ccApp is disabled, then Auto-Protect and Email Scanning will not run.
--
"But now abide faith, hope, love, these three; but the greatest of these is love." (1 Cor. 13:13) |
|
| reply to LowWaterMark
said by LowWaterMark:
What version of Windows are you running? Windows Explorer and Internet Explorer get tied together a lot depending upon certain configuration options in Windows.
WIN98SE, IE6, ZAF (3.7.211), NAV2003 (128MB RAM)
If it matters, the following load in the system tray:
Task Scheduler
Volume
Trojan Hunter
Spyware Guard
NAV2003
ZAF
HP Office Jet (I think this could be eliminated)
Maybe unrelated, but when I try to open something like Outlook when my son has a couple of Yahoo Game windows open, I get a message about there not being enough memory to open it. Closing the windows doesn't resolve the 'memory' problem ... I have to reboot.
The ZA Alert Advisor stated the following possible reasons for WE asking permission to access:
opening a new browser window (happens on first window)
accessing bookmarks from WE (nope)
Using Active Desktop (don't even know what it is or does)
browsing network neighborhood (nope)
if your Windows Explorer is configured to view web content (How do I check that?)
if your Windows Explorer is configured to launch folder windows in a separate process (How do I check that?)
I suppose that this is not that important (although I am curious as to why, now, I'm running into it) I don't mind letting it go and just giving WE permission to access the internet ... and accept it as a 'normal' thing on my system. But I'll continue trying suggestions ... just for the learning involved. |
|
| reply to ghost16825
said by ghost16825:
Check the list of DNS servers for your ISP. If if isn't one of them you might want to check your system.
If it is your DNS which it sounds as though it is you should allow traffic both ways to this address remote port 53 for any application.
At this point, I don't understand what to do or how to do as you suggest. But thanks for trying ... maybe I will comprehend it tomorrow. |
|
| reply to antiserious
said by antiserious:
Check this KEY in the registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\BrowseNewProcess
I'm using WIN98SE as well, but tampering with the registry is not something I'm familiar with. I think I shall wait on that one until I'm more rested. |
|
| reply to IGGY
said by IGGY:
These links also can provide some help
»forums.zonelabs.com/zonelabs/boa···ge.id=58
»forums.zonelabs.com/zonelabs/boa···owAccess
»www.iggyz.com/book/firewall.html
Thanks for the leads, Iggy ... I'll have to hit them again later. The first one was over my head and I couldn't make heads or tails out of what was there and how it might apply to me. The others will have to wait until I have more time to sink my teeth into the material. |
|
| reply to Bubba
said by Bubba:
If ZAF has similar Program Control settings as ZAPro....you might find the following post by LowWaterMark beneficial.
Unless I've overlooked it, there's no such option in ZAF ... but it was worth a shot. |
|
ghost16825Use security metricsPremium
join:2003-08-26 | reply to katarina
I would swear here but I would get complaints. Who would have thought a "easy to use" but "strong" firewall would be so difficult to configure?
Katerina's not alone in her problems here. It seems a lot of others have difficulty making their "easy to use" and graphically based firewalls seem "strong" to their needs.
Perhaps it's time to accept that an "easy to use" "strong" firewall is an oxymoron and there is no product which can allow "strong" security for those who don't know anything about protocols, ports etc. But don't discuss this here. Start a new thread for it.
Good luck Katerina |
|
