Microsoft mpa.one

Wow, strange. Very unexpected unless you are unactivated.

You can choose from some of these to block too:

genuine.microsoft.com
mpa.one.microsoft.com
sa.windows.com
se.windows.com
ie.search.msn.com
wustat.windows.com
wutrack.windows.com
catalog.microsoft.com
sls.microsoft.com

 

sniffing the ether with Wireshark reveals quite a lot of M$ "handshaking" and "give me 5" going on ........

 

What are these connections to M$?

Can anyone explain this to me, thank you.

 

You need to login to view this posts content.

 

Which program did you use to check that in your screenshots.

 

How can you see those details? TCp and UDP connections? Is there an app for that? Can you share?

 

That is normal if you already have this line "127.0.0.1 mpa.one.microsoft.com" in your HOSTS file. Practically you are connected with your machine 127.0.0.1. 127.0.0.1 mpa.one.microsoft.com is a remapping of that address to your localhost.

 

These connections are WGA servers. They have been around since Windows XP. I searched on Google and found information on how to block these domains. Simply adding entries to your host file should resolve the issue:

Code:

1. Click Start>All Programs>Accessories and right-click "Command Prompt".

2. Select "Run as administrator"

3. In the console window type:

notepad c:\windows\system32\drivers\etc\hosts

4. Notepad should open with the hosts file.

5. Enter the sites you desire to block.

6. Save your work.

So if I were to block mpa.one.microsoft.com I would enter the following:

Code:

127.0.0.1mpa.one.microsoft.com

The end result should look like the attachment.

 

What did you use to sniff that out?

Thanks

 

My internet already has enough spyware and lag, without MS playing "Spy Tech" behind my back.

(silly sidenote: "Spy Tech" was a series of kids toys, in late 80's/early 90s. )

Hosts file changes added. Thanks much for the heads-up on this!

--DKnight

 

Like everyone else is asking.... "How did you sniff out those connection???"

 

It is same old method to block the WGA Validation.

 

You need to login to view this posts content.

 

I just checked, Firefox specifically using Process Explorer (the program he used to "sniff out" this claims) and I'm not connected to any MS server...Windows 7 x64

 

Ofcourse, they have big fish to fry

 

Yeah agreed!