I have a serial for the video editing software "Filmora" and I am trying to prevent it from accessing the internet. I've blocked my (Win7) firewall for both of the two running executables from Filmora's installation directory, but it still connects to the internet and invalidates my (legitimate) registration serial. So, as a 2nd step (1st being the firewall blocking), I installed "Process Monitor" hoping to find a process/executable that is somehow connecting to the internet from Filmora, but could not. TOO MANY ENTRIES and I really don't know how to read the log very well. So, my 3rd idea was to install Wireshark and see if I can identify an "outbound" process/executable that way. I've installed Wireshark a couple of times, but it is even more complex than process monitor, so I thought I'd find a forum (this one) and ask for help. What's the best way to use Wireshark to monitor Filmora in order to determine which process is accessing the internet, so I can block it in my firewall? Thanks in advance. asked 08 May '16, 11:57  Wire_Birch |
2 Answers:
I might post a more detailed answer, but for posterity I seemed to have solved my problem. Long story short Wireshark showed a connection to a chinese IP Address, which I investigated and it turns out it's associated with "Wondershare". Blocked the single IP address, which worked for about a day, then it didn't. Fired-up Wireshark a 2nd time and discovered that a different IP address was being used, but it was in the same "block" of IP Addresses, so I blocked the whole range in my firewall (by making a rule), and that seems to have done the trick. Working now for about 2 days. Maybe in a week or so I'll post details on how to build the rule. I want to give it time to make sure it's a durable fix. answered 09 May '16, 11:38 Wire_Birch |
I ended up going to my firewall settings (wf.msc in Win 10) and blocking all outbound connections by default. I then re-enabled all my default inbound & outbound rules, added in a few rules for msOutlook, Kerberos, DFS and high TCP/UDP ports, and it seems to have done the trick with preventing any unauthorized program accessing the internet (ahem... Filmora). answered 24 Feb '17, 03:46  MX6 |
