[SpamCop.net - protecting the internet through technology]

[SpamCop-List] Re: IPv6?

PopRivet dilbert84 at hotmail.com
Thu Jul 8 00:04:13 EDT 2004


HI Glenn,

Thanks for the comeback.  I'm still getting it every
time I start OE, not with IE, and there are always one
or two attempts:  The first is simply the access
attempt, and then, after having Denied that, it still
asks to send "a packet", but nowhere specific in the
messages, at least.
   Denying it does absolutely nothing.  Everything
works normally.  Allowing it, the one time I did,
everythig slowed down noticeably for the rest of that
session but returned to normal next time I fired up.
   I finally found my port monitor:  If I can figure
out how to filter for it, I'll turn on the monitor and
see where it goes and if anything comes back, and of
course what else goes out.  Tried it once earlier
tonite but got nowhere - captured too much data.  Gotta
learn to filter more reliably I guess.
   I didn't think it was an MS item, but other posts
seem to indicate that it is.  I plan to check those
links out, but if it's wormy,  etc., the checking at MS
might not be that productive for a malware management
issue.
   I haven't loaded any software in a couple of months
and it's no part of anything I'm running that I'm aware
of.  What's really "interesting" is that it started on
its own, suddenly and repeatably, so ...

Not familiar with OnTrack I don't think, but I will
check that out.  Thanks.

Nothing bad's going on, I'm pretty sure, and it's easy
enough to shut it off and disable it, but the name
sounds legit, so I'm really mostly curious about what
it is.  I've always been the curious type <g>.  THEN
I'll store it in the basement!

Regards,

Pop

"Glenn Daniels" <aukword666 at attglobal.net> wrote in
message
news:ccgh0n$kmg$1 at news.spamcop.net
...
>> What is tcpip6.sys? This driver is not necessarily a
standard
>> Windows Service. It could be a trojan, or mail
"worm".
>> What happens if you stop the "Service" it provides.
Is it
>> integral to some legitimate software package you
have
>> installed on your system? Windows does have a
tcpip.sys
>> driver, but it does not send "packets" although
tcpsvcs.exe
>> does.
>>
>> I would not "know" what is going on, but I would
>> terminate the Service and find out. You might want
>> to consider using Ontrack's Housecall virus scanner
>> as it is reputed as "best" for ferreting out oddball
malware
>> more often missed by other viral scanners.
>>
>> HTH,
>> Glenn




More information about the SpamCop-List mailing list