'Windows nt logon application' is trying to access the internet through zonealarm! Also
'Userinit logon application' is trying to access the internet through zonealarm. Are these programs harmless or not??

thanks

The answer is yes/no/sorta/maybe/it depends.

First step is to check for occurances of winlogon.exe on your PC. You absolutely should have a copy in \winnt\system32. However, if you also have a copy in \winnt then you almost certainly have a worm and probably Netsky.

If that is clean, I'd suspect that winlogon.exe is doing checks based on mapped network drives (including desktop shortcuts to network resources and I'm guessing, internet as well). Default behavior is for the PC to look for shared printers and scheduled tasks on the network resources when connecting and I think this may be a function of the winlogon.exe. If so, this behavior can (and IMO should) be stopped unless you know you need it. Couple of registry tweaks that will take care of it.

Today's subliminal thought is: 'Calm down ... it's only ones and zeros.'

icq 10183575

correction:

the above folders should read 'windows' rather than 'winnt' ... bloody win2k has me confused here this morning :-)

Today's subliminal thought is: 'Calm down ... it's only ones and zeros.'

icq 10183575