А зачем Lockon.exe сам в инет лезет?

[INDIGO]

САЖ?

Лог фаервола:

 

The executable has changed since the last time you used: D:\Lock On\LOCKON.EXE

File Version : 1.1.0.0

File Description : LOCK ON

File Path : D:\Lock On\LOCKON.EXE

Process ID : 0x5F0 (Heximal) 1520 (Decimal)

 

Connection origin : local initiated

Protocol : TCP

Local Address : 10.184.104.26

Local Port : 1130

Remote Name : crl.microsoft.com

Remote Address : 131.107.99.244

Remote Port : 80 (HTTP - World Wide Web)

 

Ethernet packet details:

Ethernet II (Packet Length: 76)

Destination: 52-de-20-00-01-00

Source: 00-00-01-00-00-00

Type: IP (0x0800)

Internet Protocol

Version: 4

Header Length: 20 bytes

Flags:

.1.. = Don't fragment: Set

..0. = More fragments: Not set

Fragment offset:0

Time to live: 64

Protocol: 0x6 (TCP - Transmission Control Protocol)

Header checksum: 0xf2b3 (Correct)

Source: 10.184.104.26

Destination: 131.107.99.244

Transmission Control Protocol (TCP)

Source port: 1130

Destination port: 80

Sequence number: 2345867142

Acknowledgment number: 0

Header length: 28

Flags:

0... .... = Congestion Window Reduce (CWR): Not set

.0.. .... = ECN-Echo: Not set

..0. .... = Urgent: Not set

...0 .... = Acknowledgment: Not set

.... 0... = Push: Not set

.... .0.. = Reset: Not set

.... ..1. = Syn: Set

.... ...0 = Fin: Not set

Checksum: 0xda40 (Correct)

Data (0 Bytes)

 

Binary dump of the packet:

0000: 52 DE 20 00 01 00 00 00 : 01 00 00 00 08 00 45 00 | R. ...........E.

0010: 00 30 2C A4 40 00 40 06 : B3 F2 0A B8 68 1A 83 6B | .0,.@.@.....h..k

0020: 63 F4 04 6A 00 50 8B D3 : 17 86 00 00 00 00 70 02 | c..j.P........p.

0030: 40 00 40 DA 00 00 02 04 : 05 B4 01 01 04 02 00 35 | @.@............5

0040: 04 68 00 8E E2 9F 30 0A : 73 70 72 69 | .h....0.spri

[Dmut]

была уже такая тема. http://forum.lockon.ru/showthread.php?t=6289

смотри ответ от chp