Simple question, hopefully easy answer!?

Slavid · 08-13-2009, 12:44 PM

I have a very simple question that will most likely be answered in the blink of an eye, by someone with network knowledge;
In my HJ log I saw the following:

O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = [my company].com

Can I assume that this is not some 'eavesdropping' method that is used by my employer to see what I am doing when I am on the Internet? It is embedded amongst other Domain and Nameserver entries, which I assume is because I have a VPN that I use as I work predominantly from my home office?

I have seen HJ logs before and have never seen this, but I recently had a motherboard failure and my IT department installed the VPN when the motherboard was replaced (for which I have to say Dell did a great job, <24 hrs after I called it in!).

Many Thanks

**Glaswegian** · 08-13-2009, 01:35 PM

Hi and welcome.

It's more of a re-direct than anything. It usually points towards a DNS that will resolve domain names and convert them into an IP address (that a computer understands). Remember, computers don't speak English - they speak binary. Assuming that you've edited to keep your company private, and the edited name is your company, then you have nothing to worry about. Removing such an entry will likely break your internet connection.

Slavid · 08-13-2009, 07:52 PM

Many Thanks. Ignorance isn't always bliss. I appreciate the speedy response.

08-13-2009, 12:44 PM	#1 (permalink)
Slavid Registered User Join Date: Aug 2009 Location: Michigan USA Posts: 2 OS: XP Pro SP3	Simple question, hopefully easy answer!? I have a very simple question that will most likely be answered in the blink of an eye, by someone with network knowledge; In my HJ log I saw the following: O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = [my company].com Can I assume that this is not some 'eavesdropping' method that is used by my employer to see what I am doing when I am on the Internet? It is embedded amongst other Domain and Nameserver entries, which I assume is because I have a VPN that I use as I work predominantly from my home office? I have seen HJ logs before and have never seen this, but I recently had a motherboard failure and my IT department installed the VPN when the motherboard was replaced (for which I have to say Dell did a great job, <24 hrs after I called it in!). Many Thanks

08-13-2009, 01:35 PM	#2 (permalink)
Glaswegian Moderator/ Rangemaster TSF Academy; Analyst, Security Team; Oor Wullie; TSF Surgeon and Resident Comic Join Date: Sep 2005 Location: Glasgow Posts: 25,389 OS: Win XP Pro SP3 / Win 7 Pro My System Blog Entries: 10	Re: Simple question, hopefully easy answer!? Hi and welcome. It's more of a re-direct than anything. It usually points towards a DNS that will resolve domain names and convert them into an IP address (that a computer understands). Remember, computers don't speak English - they speak binary. Assuming that you've edited to keep your company private, and the edited name is your company, then you have nothing to worry about. Removing such an entry will likely break your internet connection. __________________ Iain - Defender of the Haggis and all things Scottish. I don't help by PM - post in the Forums. PC Safety & Security::PC running a bit slow?::Donate::Photographers Corner

08-13-2009, 07:52 PM	#3 (permalink)
Slavid Registered User Join Date: Aug 2009 Location: Michigan USA Posts: 2 OS: XP Pro SP3	Re: Simple question, hopefully easy answer!? Many Thanks. Ignorance isn't always bliss. I appreciate the speedy response.