Author Topic: CleanMem phones out to internet.  (Read 13653 times)

0 Members and 1 Guest are viewing this topic.

redmaledeer

  • Guest
CleanMem phones out to internet.
« on: March 11, 2009, 08:54:23 AM »
CleanMem every once in a while tries to phone out to the internet.   That is as shown by my ZoneAlarm firewall.   Why?   Is that to check for updates?   But this seems to happen too often (several times daily) to be a check for updates.

PcWinTech.com Forums

CleanMem phones out to internet.
« on: March 11, 2009, 08:54:23 AM »

Offline Shane

  • Top Geek, err uh Dog.
  • PcWinTech Administrator
  • PcWinTech Guru
  • *******
  • Join Date: Jul 2008
  • Posts: 16,846
  • Location: USA
  • Karma: 523
  • "Knowledge should be shared not hidden."
Cleanmem doesnt call out to
« Reply #1 on: March 11, 2009, 02:17:39 PM »
Cleanmem doesnt call out to the internet for anything, there is no update checker in it. Make sure to keep blocking it. Can you send me what the md5 is for cleanmem.exe? I want to see if it matches what it should be.

Also how often does zonealarm say it trys to access the net? and does it show where it is trying to access to? Im wondering if when cleanmem cleans the processes if zone alarm is simply picking it up. But I want to make sure.

Make sure you block any attempts just to be safe.

Shane
(My weekends belong to my wife and kids, I will try my best to answer all posts daily during the work week)

(About Shane)
Site Owner, Top Admin, Lead Programmer, Wife & 5 kids, Needs a lot more coffee.

When people ask "Why fix what isn't broken?" I reply "To make it better."
"Only a life lived for others is a life worthwhile"
Honor & Respect is all that matters.

Owner & Programmer of: www.pcwintech.com & www.tweaking.com

redmaledeer

  • Guest
Thanks for your response. The
« Reply #2 on: March 15, 2009, 08:11:07 PM »
Thanks for your response.
   
The MD5 of cleanmem.exe is 6608a66cf68bd121d7e8b9d9ff33b983.
   
I now realize that I should have noted better the details of ZoneAlarm's popup.   I will do so soon.   The popups said that it was cleanmem.exe,  but I don't recall whether cleanmem.exe was trying to access the Trusted Zone or the Internet.   Cleanmem was trying to access the "loopback,"  that is 127.0.0.1.   It gave the Port number that it was trying to access,  but I didn't record that.
   
I don't think that ZoneAlarm is picking up on CleanMem's going into action.   The popup happens too erratically for that.   And when I initiate CleanMem manually,  and see it appear for a short while in the Task Manager,  ZoneAlarm doesn't do anything.
   
There is a cleanmem.exe in the folder C:\Program Files\CleanMem,  which is where I would expect it.   But there is also a cleanmem.exe in the C:\WINDOWS\System32 folder.   The two appear identical,  or at least they have the same number of bytes.
   
In any event,  what you say tells me that I should be blocking cleanmem.exe,  which is the most important immediate point.
     
(Windows XP Home SP2,  fully updated)
     
   

Offline Shane

  • Top Geek, err uh Dog.
  • PcWinTech Administrator
  • PcWinTech Guru
  • *******
  • Join Date: Jul 2008
  • Posts: 16,846
  • Location: USA
  • Karma: 523
  • "Knowledge should be shared not hidden."
The MD5 should be
« Reply #3 on: March 15, 2009, 08:18:12 PM »
The MD5 should be 6608A66CF68BD121D7E8B9D9FF33B983
But make sure to check the one in system32. If you check the bat files in the program files cleanmem is copied to the system32 folder and runs from there.

Also remember cleanmem is in the task scheduler. is it possible maybe zonealarm is picking it up when it is ran from there?

But since cleanmem doesn't need access to the net or to 127.0.0.1 make sure you just keep it blocked.

Anything else you find out let me know.

Shane
(My weekends belong to my wife and kids, I will try my best to answer all posts daily during the work week)

(About Shane)
Site Owner, Top Admin, Lead Programmer, Wife & 5 kids, Needs a lot more coffee.

When people ask "Why fix what isn't broken?" I reply "To make it better."
"Only a life lived for others is a life worthwhile"
Honor & Respect is all that matters.

Owner & Programmer of: www.pcwintech.com & www.tweaking.com

redmaledeer

  • Guest
The ZoneAlarm popup is to the
« Reply #4 on: March 17, 2009, 02:28:24 PM »
   
The ZoneAlarm popup is
   
to the Trusted Zone,
Application: CleanMem.exe,
Destination IP: 127.0.0.1:Port 2771 ,
   
At this point I'm not clear whether it ever asked for access to the Internet Zone.   Perhaps blocking it at the Trusted Zone would keep it from doing that.
   
The MD5s of the cleanmem.exe's in the Program Files and System32 folders are
   
6608a66cf68bd121d7e8b9d9ff33b983
6608a66cf68bd121d7e8b9d9ff33b983 .
   
When I go to the cleanmem.exe's in the Program Files and System32 folders,  and double-click on these two .exe's,  in both cases cleanmem.exe goes into action.   One can see that it does so by looking at the changes in my RAM.   But in neither case does the ZoneAlarm popup appear.
   
Anyway,  that I should block it is the practical answer I needed.
     
I should say that I think CleanMem is a very nice program.   I am not competent to understand your description of how it works differently than other "optimizers,"  but it certainly has better results.
   
   

Offline Shane

  • Top Geek, err uh Dog.
  • PcWinTech Administrator
  • PcWinTech Guru
  • *******
  • Join Date: Jul 2008
  • Posts: 16,846
  • Location: USA
  • Karma: 523
  • "Knowledge should be shared not hidden."
As long as everything is
« Reply #5 on: March 17, 2009, 02:36:09 PM »
As long as everything is working ok then your good to go. Why zone alarm is popping up I don't know. But blocking it wont cause any trouble :-)

If you need anything else just let me know.

Shane
(My weekends belong to my wife and kids, I will try my best to answer all posts daily during the work week)

(About Shane)
Site Owner, Top Admin, Lead Programmer, Wife & 5 kids, Needs a lot more coffee.

When people ask "Why fix what isn't broken?" I reply "To make it better."
"Only a life lived for others is a life worthwhile"
Honor & Respect is all that matters.

Owner & Programmer of: www.pcwintech.com & www.tweaking.com

PcWinTech.com Forums

As long as everything is
« Reply #5 on: March 17, 2009, 02:36:09 PM »

 

email