Sunday, December 9, 2007

Windows Modules Installer service

Event Description: The Windows Modules Installer service entered the running state.

Windows Module Installer (TrustedInstaller.exe) service performs various Windows Update functions such as enabling installation, checking for updates, modification of updates, and removal of updates.

  • Windows Update: Updates are additions to software that can prevent or fix problems, enhance the security of the computer, or improve the computer's performance.
Outline of this event:
  1. Windows Module installer service was started by the system.
  2. It checked for new updates listed on the Microsoft Update Server.
  3. If no new updates are available, the service is stopped. If new updates are found, the service will download updates automatically, or notify the user there are new downloads to install, depending on user-defined settings in the Windows Update control panel.

DHCP-Client

Event Description: Your computer was successfully assigned an address from the network, and it can now connect to other computers.

DHCP registers and updates IP addresses and DNS records for the computer.

DHCP: Dynamic Host Configuration Protocol is a network protocol that clients use to automatically configure network settings so that computers can communicate over the network.

address: Internet protocol address. An address the internet protocol (IP) uses to identify computers on the network.

DNS: Domain Name system. The system that translates domain names into IP addresses.


The basic rundown for this event:

1. The client contacted a DHCP server using DHCP for a valid IP address.
2. The DHCP server received the request and returned an IP address to the client computer.
3. DHCP successfully assigned an IP address to the client computer.

WinHTTP Web Proxy Auto-Discovery Service

Event Description: The WinHTTP Web Proxy Auto-Discovery Service service entered the running state.

WinHTTP implements the Web Proxy Auto-Discovery (WPAD) protocol, often referred to as autoproxy. This is the protocol that web browsers implement to automatically discover the proxy configuration without requiring an end-user to specify a proxy server manually.


WinHTTP: WinHTTP is designed for use in system services and HTTP-based client applications.

Proxy: A server which serves client requests by forwarding those requests to other servers.


This service starts up to automatically to configure web proxy server settings when a web browser or other applications needs to know the configuration of a web proxy server.

The basic rundown:

1. A browser or other application needs to know the configuration settings of a web proxy server.
2. WinHTTP Web Proxy Auto-Discovery Service starts.
3. WinHTTP Web Proxy Auto-Discovery Service implements the Web Proxy Auto-Discovery Protocol (WPAD) which determines the web proxy configurations.