Thanks for your responses/explanations.
Can you lead me to a better analysis program, which
shows the real activity (thread-specific use) of FF7 ?
I used:
- Process Explorer
- Process Lasso
- System Explorer
- Samurize
I hope you can help me with this annoying problem. When FF7 is started a DNS/TCP
request is called by C:\Windows\SysWOW64\rundll32.exe. I don't like "home calls",
so i disallowed it in my firewall. The event manager has an entry with go.microsoft.com.
Do you know this problem ?
Problem
solved.
I started URLSnooper for analysis and removed my firewall entry (rundll32.exe).
Then i started ff7.exe. As expected rundll32.exe did several requests to Micro$oft.
After this i closed ff7.exe and started it again repeatedly. ==> No more requests.
It seems that Micro$oft likes Final Fantasy 7.
This was sniffed by URLSnooper:

Code: [Select]
Code:
http://go.microsoft.com/fwlink?linkid=30219&locale=de-DE&clientType=VISTA_GAMES&clientVersion=6.1.2http://go.microsoft.com/fwlink/?linkid=30219&locale=de-DE&clientType=VISTA_GAMES&clientVersion=6.1.2http://go.microsoft.com/fwlink/?linkid=30219&locale=de-DE&clientType=VISTA_GAMES&clientVersion=6.1.2http://movie.metaservices.microsoft.com/locater/WMServiceLocater.asmx/GetServiceLocationsForClient?locale=de-DE&clientType=VISTA_GAMES&clientVersion=6.1.2http://movie.metaservices.microsoft.com/locater/WMServiceLocater.asmx/GetServiceLocationsForClient?locale=de-DE&clientType=VISTA_GAMES&clientVersion=6.1.2http://www.w3.org/2001/XMLSchema-instancehttp://www.w3.org/2001/XMLSchemahttp://www.microsoft.com/Microsoft.WindowsMedia.Services.Platform.Apps.Mds.Locaterhttps://games.metaservices.microsoft.com/games/SGamesWebService.asmxhttp://gamesfeedback.metaservices.microsoft.com/gamesFeedback/GamesFeedbackWebService.asmxXhttp://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20AuthorityVhttp://crl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20AuthorityAhttp://corppki/crl/Microsoft%20Secure%20Server%20AuthorityRhttp://www.microsoft.com/pki/mscorp/Microsoft%20Secure%20Server%20AuthorityAhttp://corppki/aia/Microsoft%20Secure%20Server%20Authorityhttp://mscrl.microsoft.com/pki/mscorp/crl/mswwwhttp://crl.microsoft.com/pki/mscorp/crl/mswwwhttp://corppki/crl/mswwwhttp://www.microsoft.com/pki/mscorp/mswwwhttp://corppki/aia/mswwwhttp://cybertrust.omniroot.com/repository.cfm0http://www.public-trust.com/cgi-bin/CRL/2018/cdp.crl0http://www.public-trust.com/cgi-bin/CRL/2018/cdp.crlhttp://www.public-trust.comhttp://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20Secure%20Server%20Authority