Not sure WHo why what but please explain


#1

Im confused after a WHO is trace this address doesn’t exist and i just re-downloaded from your site TODAY…

Uninstalling tiill i understand why the remote address is a NON existent web address


#2

@Mogamer

On your PC our user interface “GlassWire” must communicate with our driver “GlassWire Control Service”. This data goes back and forth between those two applications and never leaves your PC.


#3

Thanks for fast reply Ken,
i was asking about the web address used in the remote section?

The address is odd looking for one and when you whois it, it doesn’t exist, is what i was asking… is this yours attached to the service.


#4

I believe it’s a loopback address, so it goes nowhere.

Here is some info about localhost https://en.wikipedia.org/wiki/Localhost

For that .cn domain, if you check your hosts file do you see it listed there?


#5

For the loopback (127.0.0.1) the remote address should resolve to “localhost” or the name of your computer which is “Device Name,” “System Name” or “Computer Name” depending on which utility you’re using to parse that info.

Run “System Information” (msinfo32.exe) to check what your system name is. That and localhost should be what 127.0.0.1 resolves to.

If your computer name is that real or not FQDN (fully qualified domain name) it is, in my experience, unusual unless your proxy settings might point to that or, as Ken suggests, your hosts file has been edited, the latter being really unusual. These days hosts file manipulation is the purview of hard-core networking geeks or nefarious processes.

TCPView here shows all the resolved 127.0.0.1 addresses as my system name; default hosts file and no proxy:

GWlocals


#6

In reviewing my post I realize I forgot to mention this is exactly why all Glasswire versions have the “Notify me if ‘hosts’ or ‘lmhosts’ files are modified” for the “System file monitor” setting under Security!