Can NIS2009 cause "TCP/IP has reached the security limit

Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Sed posuere consectetur est at lobortis. Vestibulum id ligula porta felis euismod semper. Donec ullamcorper nulla non metus auctor fringilla. Aenean lacinia bibendum nulla sed consectetur. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Cras mattis consectetur purus sit amet fermentum. Morbi leo risus, porta ac consectetur ac, vestibulum at eros. Sed posuere consectetur est at lobortis. Etiam porta sem malesuada magna mollis euismod. Cum sociis natoque penatibus et magnis dis parturient montes, nascetur ridiculus mus. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Cras justo odio, dapibus ac facilisis in, egestas eget quam. Aenean eu leo quam. Pellentesque ornare sem lacinia quam venenatis vestibulum. Curabitur blandit tempus porttitor. Sed posuere consectetur est at lobortis.

Hi ax

I don't know what a P2P is?where would you find it on the pc?as this TCP/IP Happens quite a bit maybe once a day.If its not Norton would another program cause it?I do get norton blocking "system" trying to share files that was in another thread I had posted.I had this laptop given to me it has been wiped clean and everything reinstalled could there be something on it from its past?I'm grasping at straws but I want to find out what these entrys mean.My scans come up clean in safe mode as well as normal.

cheers for any more help given.

Mo

Hi mo,

 

Here is a link to a post about P2P.

 

Hope it helps.

Hi Phil_D

The only programs that I have on my PC to do with music is windows media player and possibly QuickTime,I don't down load or share files(wouldn't know how to!)I have put music on my Pc from CDs that I have but that's about it.This has to be the most frustrating thing about being a novice,having things running on your PC,not necessarily hurting your PC but having them running and not knowing how to stop them.I am checking out Microsoft forums but they can be a nightmare to find your way around.Feel my pain guys LOL

Thanks for your help

Mo:smileyvery-happy:

Hi all

Is there a way to see what is making these connections?would need step by step instructions

Thanks Mo

Hi Mo

 

In NIS, the Security History, In the drop down list click on "Firewall- Activities" to see if anything shows up there,  Mine shows the likes of Outlook, Chrome, Trillian etc.

 

 

Quads 

Hi Quads

There are the usual iexplorer

                                 outlook

                                 explorer

then 2 svchost.exe

alg.exe

spoolsv

lsass and the default block file sharing from "system"

When I logged on this morning I sat down and looked at what actually happens in the event viewer in the application viewer this appeared Wmdmpmsp sevice sandwiched in between 2 Norton logs,Now I have looked this up on the elder geek site(great easy to use and understand site)so I believe I know what it is.My sister in law who I got the laptop off would have used a ipod but I don't .Could this be the source of all the TCP/IP connections that are trying to/or are occurring?Or is someone somehow using my Pc to download their music?

Cheers Mo

Hi Mo

 

By the process "explorer"  do you mean "explore.exe"?


mo wrote:

Hi Quads

There are the usual iexplorer

                                 outlook

                                  explorer


You can set  the " Wmdmpmsp" sevice to Manual or Disabled via the "services" list, look for "Portable Media Serial Number Service" in the list.

 

The other one I have stopped is "Application layer Gateway Service"  alg.exe.   also in the sevices list as I have No Dependancies needing this.

 

Quads 

 

 

Hi Quads

Thanks for your response,It says C:\windows\explorer.exe preparing to access the internet.

Cheers Mo

Sorry Quads the other is iexplore not iexplorer my typo.

Thanks Mo

Hi again

Just to clarify something I have 1)wmdmpmsn =portable serial number service set to manuel

                                                   2)wmdmpmsp service set to auto

are they the same thing??both have No dependencies.both Have local service as their logon and both share under hardware profile 1 enabled.Shall I disable both?could have sworn that one had a logon as NTAUTHORTY\Local service complete with password am I nuts or just staring at the screen to long!

cheers Mo

1)wmdmpmsn =portable serial number service set to manuel

2)wmdmpmsp service set to auto


Is the above your own typing or is it cut and pasted?

 

If it's cut and pasted, then you might be concerned about the misspelling of "manual" as "manuel".  Misspelling is almost required for most malware.

 

Unfortunately, it is also becoming more prevalent among corporate programmers (which also accounts for more coding mistakes than anyone wants to own up to).

Hi mijcar

I'm a tragic all round,I couldn't cut and paste to save myself,and obviously my typing sux even with spell check:smileywink:Am I a lost cause with computers?

Cheers Mo

Hi all

.....Imposed on the number of concurrent TCP connect attempts" In windows system log???Just thinking along the lines of with Norton continuous updating,Norton community watch is working overtime submitting stuff,some of it is taking longer than a day to be submitted?Is this a cause for concern or nothing to worry about as the PC is working OK no visible problems.

Cheers Mo

If that were true, we would all be doomed for one reason or another.  I am an excellent speller, but set me download in front of a keyboard and I will make typo after typo.

Hi mijcar

So with what you have read in regards to what has been said.All is ok and I will go and disable these services?

Cheers Mo

Hey, mo,

 

TCP/IP is not my thing.

 

If it were me

1.  and I had little time to waste, I would follow Ax's suggestion and just go with the flow.

2.  I had a lot of time on my hands or I just hate not knowing something, I would google the exact phrase.

mo,

 

Read this thread through to the end.

http://www.tek-tips.com/viewthread.cfm?qid=1246416&page=4

Hi mij

I Google most things but get bogged down in the interpretation at the other end.I am now slowing down when I read things so it gets a chance to sink in! I will look at the link thanks.

Cheers Mo:smileywink:

Hi Mo

 

This is Mine

 

 

Quads