Vista Start-up progs try to Listen and go online!

This is a very weird problem that I can't find any info about anywhere on the net! Seems like no one else is having this.

Everytime I boot the system after logging into Vista the desktop appears then these pesky notices come up from Norton Internet Security. See the screen captures. There were 2 more that I didn't capture. Will do next boot.

It happens after almost every boot. Norton doesn't seem to be able to remember these even if I select 'Block Always' or 'Allow Always'. And it started after I formatted and installed Vista from scratch. Didn't use to happen on the old install. What to do? Anyone?

PS: Spyware Doctor and Norton didn't find any virus or spyware.

Dell 1420
Vista Home Premium, SP1 fully up to date
Norton Internet Security 2009

 

One would expect Norton to configure system programs automatically.

In any case, Services should have access, Lsass does not need any unless you access other machines in the LAN or validate into a domain, MSFeedSync is up to you, it sounds like some RSS updater, perhaps?

 

do you have norton set to automatic or manual firewall settings, maybe this is a program trying to update thats not yet included in the white list from norton. if nothing else you should be able to figure out which program it is by checking your start up things and then adding it to the exclusions list.. if i can help lmk

 

So do these always try to listen or go online? I block them now. Can someone confirm that somehow its just my Norton not remembering the programs? Or are these programs constantly changing and acting weird for Norton to remember them? I can't be 100% sure that its not being caused by some malicious code running somewhere undetected.

 

Manual, but I'm having to set these permissions after every boot. All other probgrams like browsers, ftp app, itunes etc, are remembered by Norton. Looks very suspicious no?

 

It reads like a Norton configuration issue on your machine to me.

 

I Googled for the IP address listed in your first post. You might want to read this:

http://www.techspot.com/vb/topic111671.html

 

Save this as a .bat or .cmd file and run it in a command prompt. You can then research any of the IP Addresses you are unsure about.


@echo off

tasklist /svc

echo.

netstat -a -o -f | find /V "%COMPUTERNAME%:" | find /V "*:*" | find /V "Active Connections"

echo.
echo *** End of List ***
echo.

 

Thanks a lot my friend, Bell is my ISP so looks like that one is a safe connection.

 

Yes, all of those things are with windows and are fine. You should allow them.

 

Thanks for this. I got a lot of addresses from this code and they all seem to be safe but hard to tell really.

 

Thanks I'm starting to think this is true.

 

It is true. You may find others that are not OK, but those are really OK unless you like to lock things down tight.

 

as i said if norton will not accept the changes add them to the exclusions list or make your own rule for them

 

If Norton will not remember what it is told to remember ask Symantec why not