"siljaline" <siljaline@invalid.com> wrote in message
news:t251jvkqd7ab0oj7n8hsk513fttv0cbdtd@4ax.com...
> On Wed, 06 Aug 2003 05:14:30 GMT, "Steve" <srhaymesslaysspam@comcast.net>
wrote:
>
> >Can anyone tell me what SPOOLSV.EXE is and if I should let it through my
> >firewall?
>
> Print and fax "spooler" executable - Microsoft.
>
> Disallow "phone home". Doesn't need to. If it does, track the IP's the
connect
> out to are from your ZA logs or alerts and post them here or run a whois
at
> samspade http://www.samspade.org/t/
>
> HTH

Glad to hear you say that siljaline. Been wondering why on earth Windows
Explorer would be trying to connect to 62.211.180.7:80 and 62.211.180.14:80
and why Messenger tries every 2 minutes or so to connect to my own IP#, port
1900, even though it is shut off every which way to Sunday.

Pretty irritating since in order to see alert notifications I have to click
the miserable thing every minute or so to shut those two up or check
manually. And the sheer waste of system resources has steam coming out my
ears.

Messenger on XP will not, BTW, allow you to shut it down if you have OE
open - claims that the program is "using features provided by Messenger and
that they will not work properly." Microsoft site gives instructions to
remove it but then states that OE, IE and so forth will no longer work.

address digger says -
<quote>
dns 63.211.180.7


63.211.180.7 has dubious reverse DNS of unknown.Level3.net - which is a
valid hostname, but not one that resolves to 63.211.180.7



whois -h magic 63.211.180.7
Trying whois -h whois.arin.net 63.211.180.7

OrgName: Level 3 Communications, Inc.
OrgID: LVLT
Address: 1025 Eldorado Blvd.
City: Broomfield
StateProv: CO
PostalCode: 80021
Country: US

NetRange: 63.208.0.0 - 63.215.255.255
CIDR: 63.208.0.0/13
NetName: LEVEL4-CIDR
NetHandle: NET-63-208-0-0-1
Parent: NET-63-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.LEVEL3.NET
NameServer: NS2.LEVEL3.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 1999-05-28
Updated: 2001-05-30

TechHandle: LC-ORG-ARIN
TechName: level Communications
TechPhone: +1-877-453-8353
TechEmail: ipaddressing@level3.com

OrgAbuseHandle: APL8-ARIN
OrgAbuseName: Abuse POC LVLT
OrgAbusePhone: +1-877-453-8353
OrgAbuseEmail: abuse@level3.com

OrgTechHandle: TPL1-ARIN
OrgTechName: Tech POC LVLT
OrgTechPhone: +1-877-453-8353
OrgTechEmail: ipaddressing@level3.com

# ARIN WHOIS database, last updated 2003-08-05 19:15
# Enter ? for additional hints on searching ARIN's WHOIS database.
<end>

Info for both IP #'s comes up the same.

Google of Level 3 Communications, Inc. comes up as follows -

Level 3 Communications, Inc. - http://www.level3.com
.... Jul 02, 2003, Level 3 Prices $325 Million of 2.875% Convertible Senior
Notes. © 2003 by Level 3 Communications, Inc. All rights reserved. ...
Description: Holding company with subsidiaries which offer computer
operations outsoursing and systems integration...