Never mind. We fixed the problem.
I’m having a similar problem with several apps (not Eudora, which I don’t have installed). Weather Watcher is one–I have to OK it every time I boot up. (WW loads at startup, so could it be the case that it’s trying to download info before the firewall is completely loaded??) I’ll have to see what the others are.
At any rate, my question is when the above fix will be coming.
Added the next day:
I found some info at McAfee’s Site Advisor (McAfee SiteAdvisor Software – Website Safety Ratings and Secure Search) that may be relevant. It says
After downloading and installing Weather Watcher on
a fresh Windows XP machine, we checked our computer
for programs some people would consider adware,
spyware, or other unwanted software. We did not
find any such software. However we did find some things
you might want to consider. Weather Watcher earned
a nuisance score of 3.00.
(The score is on a 10 point scale, with 1 apparently being good; 3 is in their yellow zone.) There follows a long list of “things”, most of which I can’t determine whether they’re bad or not, then the ff., in a test dated 2006-02-20:
When we installed and ran Weather Watcher, it contacted
the following network servers.
web.whenu.com
a1401.x.akamai.net
app.whenu.com
whenu is rated (at the same McAfee site) as being a spyware site; the case with a1401.x.akamai.net is less clear.
OTOH, virtually every other place I’ve looked at for info on Weather Watcher rates it as squeaky clean.
So now I don’t know what to think. Maybe CFW is doing the right thing by asking me each time about Weather Watcher. In the log there’s an entry where dl.exe (the application called by Weather Watcher) was logged for “suspicious activity”, using protocol “UDP In”, remote 0.0.0.0:2056, details = “dl.exe refuses communication with Comodo Personal Firewall”. If I block dl.exe, then Weather Watcher can’t download any weather forecasts. I’m afraid I have no idea what to make of this. I don’t know what “UDP In” is; I googled it, and found a tutorial on it at List of TCP Ports and UDP Ports (Well-Known), but that wasn’t enlightening as to why this would be a security threat.
There is a Trojan called dl.exe listed at numerous sites, but according to http://virusinfo.prevx.com/pxparall.asp?PXC=dd3812855320, its file size is 6150 bytes (and it tries to put itself in the System dir), whereas the dl.exe with Weather Watcher is 28,172 bytes (and lives in the WeatherWatcher dir). So if this is the reason McAfee thinks WW is bad, it may be a misidentification.
So what is your opinion? Should I worry about WW and its “suspicious activity”, or not?