General discussion

Locked

what is twwinsdr.exe ?

By bowieb ·
My firewall has been reporting connections coming from port 58085 on one of my WinNT machines. The destination IP is always the same, but the port number keeps increasing. It has gone from 3527 to 3923 in the past two days (like a slow port scan).

I have traced the connections (I think) to a program called "twwinsdr.exe". Does anyone know what this program is? Or know anything about these connections?

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

what is twwinsdr.exe ?

by mrdbcooper In reply to what is twwinsdr.exe ?

Ok, I have found an old program called Mbone tools from 1996-1998. Its original intent was to video conference over Win95 and NT systems and share whiteboard presentations for information sharing.

I believe a variant version of the part of these tools (Sdr Sessions Manager) may have
been changed to do other things and are being employed against your firewall.
From the program's manual, this is what is said about Sdr and its connection:

"In the sdr information window, you can see which applications are used in a session, get the multicast ADDRESS, PORT and TTL (time to live) for every application and have some information about the session."

This may well be gleaning or trying to glean
information about your system. I could be wrong but I have seen old programs often used in new ways for all sorts of purposes.

I would get someone with some experience in
security to check this out further.

Hope this helps some.

Collapse -

what is twwinsdr.exe ?

by bowieb In reply to what is twwinsdr.exe ?

I tracked it down to a backup program called TapeWare.

Collapse -

what is twwinsdr.exe ?

by bowieb In reply to what is twwinsdr.exe ?

This question was closed by the author

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums