NIS 2011 v 18.6.0.29
Vista Home Premium 32 bit
I leave my PC on pretty much all day everyday.
Yesterday I noticed that in the middle of the day when nobody was home, there was this entry around noon time
Firewall rules created for Windows host process Rundll32
Two rules were created bouth outbound
One port 53 and the other port 80
I looked at the program control rules and it did not indicate any specific IP address being connected to
I looked in task manager and saw two instances one under system and the other under user name.
I know two instances are normal. But when I went to see what services they were connected to, there was nothing highlighted.
Just curious as to what would cause these two rules to be created. When I look at the firewall logs around that same time, there was no program noted as wanting to dial out
1.Confused as to why this would just randomly happen?
2. Also I did go to program rules to remove the rundll32 rule. If I understand correctly, it will come back if needed right?