Rob
07-10-2005, 03:13 AM
Question - does the executable for Windows Media Player change by design as
it is being used, or is my player being infected by malware?
Several times, right after playing streaming content from the web, I've had
Sygate Personal Firewall trigger on an executable file change for WMP 10.
I've always removed and reloaded the player after each incident. Then I
reset the firewall application permission to key on the brand new executable
crc after the reload. Then it happens again after playing streaming content -
not always the first time, but very soon.
Each time there is no corresponding virus or spyware found - I look.
Background: XP Pro fully patched always, Media Player 10, Symantec AV
corporate 8.1 updated daily, sygate personal firewall V5.6 Build 2808,
windows firewall disabled, sybot s+d and ad-aware.
it is being used, or is my player being infected by malware?
Several times, right after playing streaming content from the web, I've had
Sygate Personal Firewall trigger on an executable file change for WMP 10.
I've always removed and reloaded the player after each incident. Then I
reset the firewall application permission to key on the brand new executable
crc after the reload. Then it happens again after playing streaming content -
not always the first time, but very soon.
Each time there is no corresponding virus or spyware found - I look.
Background: XP Pro fully patched always, Media Player 10, Symantec AV
corporate 8.1 updated daily, sygate personal firewall V5.6 Build 2808,
windows firewall disabled, sybot s+d and ad-aware.