locked
Does explorer.exe require network access? RRS feed

  • Question

  • I know from personal experience many viruses like attaching themselves to explorer.exe, attempting to communicate across the network from this process.

    I am therefore considering creating a gpo to preemptively secure against this by adding explorer.exe to Windows Firewall so it can not access the network/internet. Would this be a mistake? Does explorer.exe ever need to communicate with the network for any legitimate reason?
    Thursday, November 11, 2010 8:24 PM

All replies

  • I think you might have some issues.  Microsoft integrated File Explorer and Internet Explorer a while ago.  Although they are no longer the same program (explorer.exe and iexplore.exe), it still may have some dependencies.

    I just added this setting in my test environment and everything seemed to work when accessing network resources.

    I am not sure if your applications will need to hook into explorer.exe; but on a test run, it works.

     

    Thanks,

    Core Defend

    IT Security

    http://www.coredefend.com

     

    • Edited by Core Defend Monday, November 15, 2010 2:28 PM Link
    Monday, November 15, 2010 2:21 PM