While launching Thunderbird the follwoing alert pops up:
Date/Time :2006-10-07 17:39:10
Severity :High
Reporter :Application Behavior Analysis
Description: Suspicious Behaviour (thunderbird.exe)
Application: C:\Program Files\Mozilla Thunderbird\thunderbird.exe
Parent: C:\WINDOWS\explorer.exe
Protocol: UDP Out
Destination: xx.x.30.xx:dns(xx)
Details: C:\Program Files\Internet Explorer\iexplore.exe has tried to use the Parent application C:\WINDOWS\explorer.exe through OLE Automation, which can be used to hijack other applications.
Why would Internet Explorer be involved in the launch of Thunderbird? I’ve asked others and no one seems able to understand it.
What that is saying is… WARNING MSIE tampered with Explorer (hijackers do that) and since Explorer is the parent of Thunderbird (the program you just started) it may have been compromised. Do you really want to allow it to connect to the Net? … or something like that… in plain language… sort of.
Thanks for that explanation. I suppose it doesn’t mean that there’s a hijack attempt-only that it’s possible. Is that correct?
Further, if I had the CPF set to the default settings would I have seen that warning? I have it set to tell me whenever there’s a connection but for those who have downloaded CPF and only use the default settings would they receive the above warning?
Correct. I doubt MSIE is trying to hijack Explorer.
Further, if I had the CPF set to the default settings would I have seen that warning? I have it set to tell me whenever there's a connection but for those who have downloaded CPF and only use the default settings would they receive the above warning?
If you receive this warning or not is based on the options under “Application Behavior Analysis” (Security tab - Advanced tab).
The general rule of thumb for this warning is that if you don’t recognise all of the components mentioned, then sit up & pay careful attention. Most pop-ups can be explained because of some update or action that you performed & these are OK. It’s the unexpected & unknown that you should pay attention to.