What is going on when my explorer.exe attempts to connect to a server at tucows? I am running XP with SP2.
Although the destination server is sa.windows.com it is actually owned by tucows and not Microsoft according to whois. Since I don't have any relationship to tucows, I don't understand why my PC should be trying to connect to one of their servers. Furthermore, I don't understand why it is explorer.exe trying to connect instead of svchost.exe.
It only seems to occur periodically (twice in the past three days per my log files below) but I would like to know what/why/how this is happening, just in case my firewall isn't stopping all of the connection attempts. Hmmm...can you tell that I don't think my firewall is stopping all of the connection attempts?
Thanks in advance guys.
Code:
Log:
Description Windows Explorer was blocked from connecting to the Internet (207.46.248.249:HTTP).
Rating High
Date / Time 2007/07/24 15:30:12-8:00 GMT
Type Program Access
Program explorer.exe
Source IP
Destination IP 207.46.248.249:80
Direction Outgoing (connect)
Action Taken Blocked
Count 2
Source DNS
Destination DNS sa.windows.com
================================================== ===========
Description Windows Explorer was blocked from connecting to the Internet (207.46.248.249:HTTP).
Rating High
Date / Time 2007/07/27 09:32:46-8:00 GMT
Type Program Access
Program explorer.exe
Source IP
Destination IP 207.46.248.249:80
Direction Outgoing (connect)
Action Taken Blocked
Count 2
Source DNS
Destination DNS sa.windows.com
hqfm.com | xhpr.com | stock-ex.com | vuhb.com | 
