Security Basics mailing list archives

RE: Some abnormal behavior when opening excel and word files ..


From: "Chad" <ncm () xs4all nl>
Date: Fri, 9 Jan 2004 11:35:44 +0100

When the PC is connected to the LAN, opening local Excel and Word files
take abnormally long time .. disabling the AV does not make a difference
.. and a lot of SYNs are shown to the Verisign IPs of crl.verisign.com ..
198.49.161.200 - 198.49.161.205 - 198.49.161.206

I have been seeing this as well on my XP Box, and may be wrong, but it looks
like it has something to do with some kind of "certificate revocation list"?

The only way I could so far find to switch it off is to go to IE Tools->
Internet Options-> Advanced, turn off the options that check for the CRL,
e.g.. "Check for Publisher's CRL", "Check for Server's CRL", and "Warn about
site certificates" BUT I =don't= want to do this, as the check in my view is
needed for IE.

What annoys me the most is that this outbound checks happens everywhere you
go; Windows explorer, Word, Excel, MS Project ...

The amount of traffic this generates with ordinary PC usage is enormous and
automatically happens when you're online. I'd hate to be a dial-up user! Oh
yeh, and if you block it using your firewall, opening anything that makes
this request makes you wait until it times out...

It all started after installing a MS Update .. I have however not yet found
the time to look at which one exactly. Anyone else maybe?

-Chad




---------------------------------------------------------------------------
Ethical Hacking at InfoSec Institute. Mention this ad and get $720 off any 
course! All of our class sizes are guaranteed to be 10 students or less. 
We provide Ethical Hacking, Advanced Ethical Hacking, Intrusion Prevention, 
and many other technical hands on courses. 
Visit us at http://www.infosecinstitute.com/securityfocus to get $720 off 
any course!  
----------------------------------------------------------------------------


Current thread: