I'll try this again. I tried posting a similar message earlier, but it
didn't propagate.

I'm using XP Home SP3 fully updated with all security patches etc.
Whenever I try to use Search within Windows Explorer (note that I did
NOT say INTERNET Explorer, I said WINDOWS Explorer!), my firewall pops
up the following alert:

"'Windows Explorer' from your computer wants to connect to 65.55.11.179,
port 80"

I did a WHOIS on that IP address and here are the results:
_____________________________________________________________________________
OrgName: Microsoft Corp
OrgID: MSFT
Address: One Microsoft Way
City: Redmond
StateProv: WA
PostalCode: 98052
Country: US

NetRange: 65.52.0.0 - 65.55.255.255
CIDR: 65.52.0.0/14
NetName: MICROSOFT-1BLK
NetHandle: NET-65-52-0-0-1
Parent: NET-65-0-0-0-0
NetType: Direct Assignment
NameServer: NS1.MSFT.NET
NameServer: NS5.MSFT.NET
NameServer: NS2.MSFT.NET
NameServer: NS3.MSFT.NET
NameServer: NS4.MSFT.NET
Comment:
RegDate: 2001-02-14
Updated: 2004-12-09

RTechHandle: ZM23-ARIN
RTechName: Microsoft Corporation
RTechPhone: +1-425-882-8080
RTechEmail: noc@microsoft.com

OrgAbuseHandle: ABUSE231-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@microsoft.com

OrgAbuseHandle: HOTMA-ARIN
OrgAbuseName: Hotmail Abuse
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@hotmail.com

OrgAbuseHandle: MSNAB-ARIN
OrgAbuseName: MSN ABUSE
OrgAbusePhone: +1-425-882-8080
OrgAbuseEmail: abuse@msn.com

OrgNOCHandle: ZM23-ARIN
OrgNOCName: Microsoft Corporation
OrgNOCPhone: +1-425-882-8080
OrgNOCEmail: noc@microsoft.com

OrgTechHandle: MSFTP-ARIN
OrgTechName: MSFT-POC
OrgTechPhone: +1-425-882-8080
OrgTechEmail: iprrms@microsoft.com

# ARIN WHOIS database, last updated 2009-08-30 20:00
# Enter ? for additional hints on searching ARIN's WHOIS database.
________________________________________________________________________

What *possible* reason could there be for Windows Explorer or Search
needing to contact any server, much less Microsoft itself, whatsoever?
Note that I was only trying to find a file on my hard drive.

TIA.

--
John Corliss

John

Could it be the Windows Error Reporting service trying to send a report
from Event Viewer to Microsoft? Have you checked Event viewer?


--


Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~


John Corliss wrote:

Quote:

I'll try this again. I tried posting a similar message earlier, but it didn't propagate. I'm using XP Home SP3 fully updated with all security patches etc. Whenever I try to use Search within Windows Explorer (note that I did NOT say INTERNET Explorer, I said WINDOWS Explorer!), my firewall pops up the following alert: "'Windows Explorer' from your computer wants to connect to 65.55.11.179, port 80" I did a WHOIS on that IP address and here are the results: _____________________________________________________________________________ OrgName: Microsoft Corp OrgID: MSFT Address: One Microsoft Way City: Redmond StateProv: WA PostalCode: 98052 Country: US NetRange: 65.52.0.0 - 65.55.255.255 CIDR: 65.52.0.0/14 NetName: MICROSOFT-1BLK NetHandle: NET-65-52-0-0-1 Parent: NET-65-0-0-0-0 NetType: Direct Assignment NameServer: NS1.MSFT.NET NameServer: NS5.MSFT.NET NameServer: NS2.MSFT.NET NameServer: NS3.MSFT.NET NameServer: NS4.MSFT.NET Comment: RegDate: 2001-02-14 Updated: 2004-12-09 RTechHandle: ZM23-ARIN RTechName: Microsoft Corporation RTechPhone: +1-425-882-8080 RTechEmail: noc@microsoft.com OrgAbuseHandle: ABUSE231-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-425-882-8080 OrgAbuseEmail: abuse@microsoft.com OrgAbuseHandle: HOTMA-ARIN OrgAbuseName: Hotmail Abuse OrgAbusePhone: +1-425-882-8080 OrgAbuseEmail: abuse@hotmail.com OrgAbuseHandle: MSNAB-ARIN OrgAbuseName: MSN ABUSE OrgAbusePhone: +1-425-882-8080 OrgAbuseEmail: abuse@msn.com OrgNOCHandle: ZM23-ARIN OrgNOCName: Microsoft Corporation OrgNOCPhone: +1-425-882-8080 OrgNOCEmail: noc@microsoft.com OrgTechHandle: MSFTP-ARIN OrgTechName: MSFT-POC OrgTechPhone: +1-425-882-8080 OrgTechEmail: iprrms@microsoft.com # ARIN WHOIS database, last updated 2009-08-30 20:00 # Enter ? for additional hints on searching ARIN's WHOIS database. ________________________________________________________________________ What *possible* reason could there be for Windows Explorer or Search needing to contact any server, much less Microsoft itself, whatsoever? Note that I was only trying to find a file on my hard drive. TIA.

Is the "Search Companion" displayed on the left pane
when you use 'Search'?

--
JS
http://www.pagestart.com



"John Corliss" <q34wsk20@yahoo.com> wrote in message
news:WfidnWKN18v0LwbXnZ2dnUVZ_gudnZ2d@posted.ccountrynet...

Quote:

I'll try this again. I tried posting a similar message earlier, but it didn't propagate. I'm using XP Home SP3 fully updated with all security patches etc. Whenever I try to use Search within Windows Explorer (note that I did NOT say INTERNET Explorer, I said WINDOWS Explorer!), my firewall pops up the following alert: "'Windows Explorer' from your computer wants to connect to 65.55.11.179, port 80" I did a WHOIS on that IP address and here are the results: _____________________________________________________________________________ OrgName: Microsoft Corp OrgID: MSFT Address: One Microsoft Way City: Redmond StateProv: WA PostalCode: 98052 Country: US NetRange: 65.52.0.0 - 65.55.255.255 CIDR: 65.52.0.0/14 NetName: MICROSOFT-1BLK NetHandle: NET-65-52-0-0-1 Parent: NET-65-0-0-0-0 NetType: Direct Assignment NameServer: NS1.MSFT.NET NameServer: NS5.MSFT.NET NameServer: NS2.MSFT.NET NameServer: NS3.MSFT.NET NameServer: NS4.MSFT.NET Comment: RegDate: 2001-02-14 Updated: 2004-12-09 RTechHandle: ZM23-ARIN RTechName: Microsoft Corporation RTechPhone: +1-425-882-8080 RTechEmail: noc@microsoft.com OrgAbuseHandle: ABUSE231-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-425-882-8080 OrgAbuseEmail: abuse@microsoft.com OrgAbuseHandle: HOTMA-ARIN OrgAbuseName: Hotmail Abuse OrgAbusePhone: +1-425-882-8080 OrgAbuseEmail: abuse@hotmail.com OrgAbuseHandle: MSNAB-ARIN OrgAbuseName: MSN ABUSE OrgAbusePhone: +1-425-882-8080 OrgAbuseEmail: abuse@msn.com OrgNOCHandle: ZM23-ARIN OrgNOCName: Microsoft Corporation OrgNOCPhone: +1-425-882-8080 OrgNOCEmail: noc@microsoft.com OrgTechHandle: MSFTP-ARIN OrgTechName: MSFT-POC OrgTechPhone: +1-425-882-8080 OrgTechEmail: iprrms@microsoft.com # ARIN WHOIS database, last updated 2009-08-30 20:00 # Enter ? for additional hints on searching ARIN's WHOIS database. ________________________________________________________________________ What *possible* reason could there be for Windows Explorer or Search needing to contact any server, much less Microsoft itself, whatsoever? Note that I was only trying to find a file on my hard drive. TIA. -- John Corliss

Is Windows (Desktop) Search installed?

John Corliss wrote:

Quote:

I'll try this again. I tried posting a similar message earlier, but it didn't propagate. I'm using XP Home SP3 fully updated with all security patches etc. Whenever I try to use Search within Windows Explorer (note that I did NOT say INTERNET Explorer, I said WINDOWS Explorer!), my firewall pops up the following alert: "'Windows Explorer' from your computer wants to connect to 65.55.11.179, port 80" I did a WHOIS on that IP address and here are the results: _____________________________________________________________________________ OrgName: Microsoft Corp OrgID: MSFT Address: One Microsoft Way City: Redmond StateProv: WA PostalCode: 98052 Country: US NetRange: 65.52.0.0 - 65.55.255.255 CIDR: 65.52.0.0/14 NetName: MICROSOFT-1BLK NetHandle: NET-65-52-0-0-1 Parent: NET-65-0-0-0-0 NetType: Direct Assignment NameServer: NS1.MSFT.NET NameServer: NS5.MSFT.NET NameServer: NS2.MSFT.NET NameServer: NS3.MSFT.NET NameServer: NS4.MSFT.NET Comment: RegDate: 2001-02-14 Updated: 2004-12-09 RTechHandle: ZM23-ARIN RTechName: Microsoft Corporation RTechPhone: +1-425-882-8080 RTechEmail: noc@microsoft.com OrgAbuseHandle: ABUSE231-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-425-882-8080 OrgAbuseEmail: abuse@microsoft.com OrgAbuseHandle: HOTMA-ARIN OrgAbuseName: Hotmail Abuse OrgAbusePhone: +1-425-882-8080 OrgAbuseEmail: abuse@hotmail.com OrgAbuseHandle: MSNAB-ARIN OrgAbuseName: MSN ABUSE OrgAbusePhone: +1-425-882-8080 OrgAbuseEmail: abuse@msn.com OrgNOCHandle: ZM23-ARIN OrgNOCName: Microsoft Corporation OrgNOCPhone: +1-425-882-8080 OrgNOCEmail: noc@microsoft.com OrgTechHandle: MSFTP-ARIN OrgTechName: MSFT-POC OrgTechPhone: +1-425-882-8080 OrgTechEmail: iprrms@microsoft.com # ARIN WHOIS database, last updated 2009-08-30 20:00 # Enter ? for additional hints on searching ARIN's WHOIS database. ________________________________________________________________________ What *possible* reason could there be for Windows Explorer or Search needing to contact any server, much less Microsoft itself, whatsoever? Note that I was only trying to find a file on my hard drive. TIA.

I also get notified by my firewall about the same attempt for an
outbound TCP connection to 65.55.11.179 port 80. There are two
attempts, the firewall reports them a couple seconds after pressing the
"Search" button in Windows Explorer, without any other input. Also when
starting Explorer search with WindowsKey-F. Blocking them does not
prevent searching my local HD. I'm using Windows XP Pro SP3. There are
no related events in the Event Viewer under any category. I'm not using
the search companion, and Windows Desktop Search is not installed.

After my post, I found a proposed solution elsewhere. Microsoft Technet
article http://technet.microsoft.com/en-us/library/bb457178.aspx#EBAA
gives complete information.

Step 1: In the search window, pick "Change preferences". Then pick
"Change Internet search behavior", and select "With Classic Internet
search". I didn't realize I was using a "search companion" because I
didn't see an animated screen character.

This step alone didn't prevent attempts to connect to IP 65.55.11.179
(sa.windowsmedia.com.akadns.net).

Step 2: The connection to this IP is for the purpose of downloading
newer XML files
used by the Search Companion, EVEN WHEN "Classis Internet search" is
selected and "Search Companion" turned off.

To prevent this connection, the MS article instructs you to modify an
Administrative Template using a more involved procedure (installing
GPMC, ...). I'm on a corporate domain, and I'm not sure this would work
for me.

On Sep 15, 10:28 am, Eric Peterson <Eric.Peterson.
3yk...@no.email.invalid> wrote:

Quote:

I also get notified by my firewall about the same attempt for an outbound TCP connection to 65.55.11.179 port 80.  There are two attempts, the firewall reports them a couple seconds after pressing the "Search" button in Windows Explorer, without any other input.  Also when starting Explorer search with WindowsKey-F.  Blocking them does not prevent searching my local HD.  I'm using Windows XP Pro SP3.  There are no related events in the Event Viewer under any category.  I'm not using the search companion, and Windows Desktop Search is not installed.

If you are using the Windows Search Companion, configure it to use
Classic Search:

http://technet.microsoft.com/en-us/library/bb457178.aspx#EBAA