What does this mean??

[Wullie]

Hi,

I was browsing around my computer a minute ago and just happened to click on the "network places" icon.

I was totally suprised to find that there was a network connection set up with ftp.freebsd.org

I have no idea how this appeared there and am totally puzzled...

Should I be concerned? What would cause this?

I have a firewall but am also connected by a cable modem, could this be anything to do with it? Should I contact me ISP and complain?

Please help me as I have no idea where to start here....

Thanks in advance..
Wullie

http://www.survivorhelp.co.uk

http://www.freshlookdesign.co.uk

 

[Tezdread]

I'm not sure how this connection was made but I wouldn't worry about it to much, it doesn't look like a security risk.

The address is to an ftp server and the owners of this are software developers, a form of UNIX. The chances are that you visited a site and something in the code set up a link or you saved it as a link somehow. Either way this should not be a problem.

If you want rid of it just delete it ) get yourself ZoneAlarm if you haven't already as this will monitor all incoming and outgoing connections.

 

[Wullie]

Hi mate,

I was aware who the ftp server belonged to, it was just the fact that it was linked in the network...

I have already got Zonealarm and it has just alerted me of the presence of a virus.. Ithink it is a virus anyway..

Does anyone here know anything about SUCATREG.EXE?

I have found this trying to connect to the net and run a search on the term and it came up with virus alerts, but for some reason when I scan it (with 3 different scanners) it returns clean..

Anyone any ideas??

Thanks in advance Wullie

http://www.survivorhelp.co.uk

http://www.freshlookdesign.co.uk

 

[welshguy]

Wullie,

It's not necessarily a virus (and if you're virus checker is up to date probably isn't) - I think it's used to check whether device drivers are signed.
Cheers

 

[TheGrey]

it's just a windows feature, remembering all your connections
try any ftp that you connect to (via IE), it'll end up there as well, if your computer is configured to handle ftp connections that way

 

[Wullie]

Thanks guys,

The reason I posted about this was I was getting mixed reactions from the searches I tried. The following is an example.

One Site Said

Problem: When I open msinfo32 Device Manager it tries to connect to the internet. It is sucatreg.exe (Windows catalogue registration) knocking on the door out. What is it trying to do and how do I stop it doing it ?

Possible Solution: Most likely you have an "unsigned" driver that sucatreg.exe is trying to update a driver for or you may have a damaged catalog. In Control Panel, double-click Internet Options, click on the TAB labeled Advanced, scroll down the list to the heading of Security, and Uncheck the option “Check for publisher’s certificate revocation.”, Then click OK. That should fix it.

Other sites, mainly

http://www.hi-tech.net/wwwboard/messages/2274.html

say that this is a virus and a fewpeople saying that this arrived by email..

Thanks again, I appreciate it..

Wullie

http://www.survivorhelp.co.uk

http://www.freshlookdesign.co.uk

 

[Guest_imported]

Sucatreg.exe is the Windows Catalog Registration program (49,152 bytes)found in the windows\system directory.If you received it as an email attachment it probably is a worm virus

http://www.sophos.com/virusinfo/analyses/w32mag.html

If you have not had any attachments with this name(you should have been aware of opening an email with an attachment with this name)it probably is the genuine microsoft program checking for a signed driver.
This question-answer from another forum should help

Problem: When I open msinfo32 Device Manager it tries to connect to the internet. It is sucatreg.exe (Windows catalogue registration) knocking on the door out. What is it trying to do and how do I stop it doing it ?

Possible Solution: Most likely you have an "unsigned" driver that sucatreg.exe is trying to update a driver for or you may have a damaged catalog. In Control Panel, double-click Internet Options, click on the TAB labeled Advanced, scroll down the list to the heading of Security, and Uncheck the option “Check for publisher’s certificate revocation.”, Then click OK. That should fix it.

 

[Guest_imported]

Sucatreg.exe is the Windows Catalog Registration program (49,152 bytes)found in the windows\system directory.If you received it as an email attachment it probably is a worm virus

http://www.sophos.com/virusinfo/analyses/w32mag.html

If you have not had any attachments with this name(you should have been aware of opening an email with an attachment with this name)it probably is the genuine microsoft program checking for a signed driver.

 

[Guest_imported]

Driver Signing for Windows Operating Systems <

http://www.microsoft.com/hwdev/desinit/digitsign.htm>.

A tool (Sucatreg.exe) was provided with Windows 98 Second Edition that developers can use to register catalog files so end users are not prompted to provide catalog files during device installation.

http://www.microsoft.com/hwdev/desinit/digitsign.htm

(Sept. 20, 2001)