I've noticed many instances in which my firewall rules are being changed, and I am not making these changes nor is anyone else in my household.
I'm not speaking of "Firewall Rules were automatically created for [program]" type of things. I mean specific "You allowed Application Layer Gateway service to access your network resources" though I certainly did not. I don't even know what that is, but I don't want to delete/quarantine something important by accident.
The "You allowed" applies to all the following programs (that I did not allow):
-Spooler SubSystem App ("allowed" six times in less than a millisecond, a final total of eleven times in a row; unknown app)
-MobileDeviceService (unknown app, do not have an iphone/ipod)
-Plugin Container for Firefox
-Bonjour Service (unknown app)
This has been happening since I did a firewall reset at 8:26 PM on April 25th. I reset the rules to default because I dicked around with them previously (only blocking programs from internet, not allowing) and was unable to access internet explorer to re-download Firefox after the updater.exe virus caused Norton to delete the Mozilla RunTime or whatever it was (not complaining, it saved my computer from xul.dll (suspicous.cloud.9) so I'm happy about that). Firewall rules were updated two seconds after the reset (might just mean nothing since they were technically updated.)
Incase Firewall rules automatically being created is a bad thing. they were auto created for the following programs:
-System (twice)
-Adobe (R) Flash(R) Player Update Service (the double rights symbol has me a bit worried; twice)
-GoToMeeting (unknown app; twice)
-Windows Explorer
NDIS filtering enabled randomly. Download insight, maybe? I'm not even sure what that is/if I did it myself.
I have a "Firewall Rules Updated" a total of 25 times, only a fraction of which were by me.
I'm scared. lol. Is this normal?
& while I'm at in, in Insight there's a lot of "skipped files" that I don't want to skip. 95% of the start up items are skipped in scans. I don't like this. Is there a way to scan these files directly from insight without having to go through and locate them?
Just some extra notes:
-I run Windows XP
-I don't do online/offine gaming.
-downloading/torrent use is rare and always scanned before opening.
-Norton is always on and active
-I don't have a webcam connected to my computer
-I don't use anything like skype, msn, or other instant messengers.
-I'm a paranoid lunatic when it comes to computer stuff since the internet is scary as hell, so I'm very cautious.