Jump to content


Photo

exe trying to act as server


  • Please log in to reply
4 replies to this topic

#1 Jaspertje

Jaspertje

    Member

  • Full Member
  • Pip
  • 2 posts

Posted 30 October 2006 - 02:43 AM

Hi all,

I'm happy to say that I do not have an infection problem; just a question.

Every once in a while I get a zonealarm message, telling me that some executable (lately it's the Logitech-connected backweb-nnnnnnn.exe) is trying to act as server. I always deny that possibility, but now it got me curious: what exactly does that mean, that an exe is "trying to act as server"?

Thanks for the info!

#2 cnm

cnm

    Mother Lion of SWI

  • Retired Staff
  • PipPipPipPipPip
  • 25,317 posts

Posted 30 October 2006 - 09:52 AM

A server accepts connections from the internet. Normally your exe's are clients; the only connections to clients are ones they initiate.

Backweb gets shipped with Logitech but there is no harm in removing it. See the wealth of stuff found with Google: http://www.google.co...c...n&q=backweb
Microsoft MVP Windows Security 2005-2006
How camest thou in this pickle? -- William Shakespeare:(1564-1616)
The various helper groups here
UNITE

#3 Indrid_Cold

Indrid_Cold

    Forum Deity

  • Retired Staff
  • PipPipPipPipPip
  • 7,070 posts

Posted 30 October 2006 - 05:36 PM

And likely used to inform/perform of updates to the application.
Hope is not a method.

If I have helped in some way, please consider donating to SpywareInfo's crusade against Malware See Here

Member of ASAP since 2004 Alliance of Security Analysis Professionals
Member of UNITE since 2006 United Network of Instructors and Trained Eliminators

Fight back Malware Complaints

#4 Jaspertje

Jaspertje

    Member

  • Full Member
  • Pip
  • 2 posts

Posted 31 October 2006 - 05:52 AM

@cnm & @Indrid_Cold:

Thanks a lot, guys. Imagine: nobody could tell me this!

#5 hornet777

hornet777

    Forum Deity

  • Full Member
  • PipPipPipPipPip
  • 607 posts

Posted 31 October 2006 - 08:22 PM

Do you see that not creating a permanent rule (be it a firewall, or HIPS system) is a valid option by this? This way, you always have tabs when this app is trying to call home.

Just throwing it in....:)
After all is invested in correctness, then how does it stand with truth?




Member of UNITE
Support SpywareInfo Forum - click the button