Anyone know what .NET Runtime Optimization Service is?

pdsnickles · Apr 5, 2009

When I first set up my Firewall on my new computer, I kept getting a warning pop up from the Firewall (AVG) that said ".NET Runtime Optimization Service wants to connect to the internet" and it wanted to know whether to block it or allow it.

Not knowing what it was, I blocked it.

I did research on google and I found nothing that explains what it does or why. One site said it is malware and I should block it, another said it is important to keep my computer running well and I should allow it! :huh:

Anyone know exactly what this is, why it is here, and whether or not I should uninstall or block it, or allow it? Any info is appreciated.

Pompeius · Apr 5, 2009

I think this may answer your question

why does the .NET Runtime Optimization Service keep trying to use the internet?

pdsnickles · Apr 6, 2009

Thanks for that. I had actually seen that in my search, but I don't fully understand it.
It says that MAYBE it checks to see if MS licenses are valid. I have no problem with this, mine are valid, but then it says :
"If you block it, certain multimedia content will no longer play..."
but it does not explain why or what...
Do they mean some multimedia content via IE will not play (I don't use IE so that would not be a problem...)
I'm surprised more people don't know more about this.
Some people seem to have some idea what it is, but no one seems to know a lot about it.
I'll check wikipedia... I forgot to check there...
I guess I can allow it, but I've noticed with this Vista OS that one thing and another is constantly trying to communicate via the net, and I'm always reluctant to allow it without knowing what it is.

Airbot · Apr 6, 2009

Here's a question..Have you even ran full scans with an Antivirus and Antispyware program? Or do you have an Antivirus program installed and running?

If not, you can run scans with any of these, all free...

avast! Home Edition
microsoft
Spybot-S&D!
SUPERAntiSpyware
Malwarebytes

there are more, these are just a few.

pdsnickles · Apr 6, 2009

Airbot said:
Here's a question..Have you even ran full scans with an Antivirus and Antispyware program? Or do you have an Antivirus program installed and running?

If not, you can run scans with any of these, all free...

avast! Home Edition
microsoft
Spybot-S&D!
SUPERAntiSpyware
Malwarebytes

there are more, these are just a few.

Yes I am running AVG Firewall and Anti-Virus. I have no viruses.
The problem as I see it now is that Microsoft Vista is running things in which it wants to access the TCP Connection and I see no reason why it needs to do so. Yet what little info I am gathering says that some of these things are "necessary". Yet they don't say exactly why they are necessary.

The latest one I have had trying to "phone home" today is MS Windows Search Filter Host". I get the message that the above service is trying to establish a TCP connection via Port 80 (I think that's what it said), when I am simply using Vista to search a folder for my own photos to upload to a google-related site. The connection is already there, between this site and my computer, why is this Windows service trying to establish another connection?

H2SO4 · Apr 6, 2009

"Consumer-grade" firewalls are frequently somewhat alarmist. A nervous user is more likely to whip out their credit card come upgrade or subscription renewal time.

The link that Pompeius posted is a good one (and rep-deserving). Perhaps a bit of clarification might help you...

A CRL is a "certificate revocation list". In order to ensure security when you're accessing content via SSL or other mechanisms requiring certificates, your box must check "revocation" lists to see whether an otherwise legit-looking certificate may have been declared void in the meantime.

Think of the .Net framework as doing work on behalf of apps. Plenty of apps are "managed code" nowadays, which means that they rely on the .Net framework. They may be standalone apps or browser-based. As a side-effect of an app needing a secure connection, the .Net framework must work with certificates under the hood, which also includes checking CRLs.

Don't get too worked up over messages from scareware. If it's any consolation, properly written malware on your machine would simply deactivate your firewall

SCSIraidGURU · Apr 6, 2009

.NET Runtime Optimization service for used my Microsoft to optimize .NET Framework. I have yet seen it work. You can allow it on your firewall.

pdsnickles · Apr 6, 2009

H2SO4 said:
"Consumer-grade" firewalls are frequently somewhat alarmist. A nervous user is more likely to whip out their credit card come upgrade or subscription renewal time.

The link that Pompeius posted is a good one (and rep-deserving). Perhaps a bit of clarification might help you...

A CRL is a "certificate revocation list". In order to ensure security when you're accessing content via SSL or other mechanisms requiring certificates, your box must check "revocation" lists to see whether an otherwise legit-looking certificate may have been declared void in the meantime.

Think of the .Net framework as doing work on behalf of apps. Plenty of apps are "managed code" nowadays, which means that they rely on the .Net framework. They may be standalone apps or browser-based. As a side-effect of an app needing a secure connection, the .Net framework must work with certificates under the hood, which also includes checking CRLs.

Don't get too worked up over messages from scareware. If it's any consolation, properly written malware on your machine would simply deactivate your firewall

Thanks for your information. That is the best - only, really - explanation of .NET Runtime Optimization Service I have read.

I can see both sides of the coin as far as AVG's notifying me of these things. That's it's job, to notify me of attempts for a program or application or ? to try and connect to my computer without my knowledge. I wouldn't classify AVG as scareware, it's a very good firewall in my opinion and in the opinion of many.

As to these warnings you classify as "scareware" making me buy AVG next time, I think it has the opposite effect, in a sense.

I would rather buy something that recognizes the difference between "everyday" necessary or useful attempts to connect to the net, and someone hacking my computer. I think it is doing it's job but perhaps they could code the Firewall software so that it tells you what these things are and gives a recommendation of "block" or "accept", when these things pop up? I have not checked this one yet but I've checked my old computer under AVG's watch, and it has gotten a 100% security rating at those sites that test it. (DSL Reports used to test this but no longer do.)

Any idea why I did not get similar warnings under XP SP2?
I guess it could be that since I'd already had AVG running for some time with XP, I had already made a permanent rule as to .NET Runtime Optimization Service. Or perhaps the newest version of AVG which I am now using (a small upgrade) has become more "nervous". Or perhaps Vista uses this .NET service more than XP?

pdsnickles · Apr 8, 2009

SCSIraidGURU said:
.NET Runtime Optimization service for used my Microsoft to optimize .NET Framework. I have yet seen it work. You can allow it on your firewall.

I think you must have been distracted when you wrote the above. I am not sure what this sentence means.
Can you clarify?
It seems you are saying that it does not work, yet you are also saying I should allow it. Seems to me if it does not work I do not need to allow it, no?

Anyone know what .NET Runtime Optimization Service is?

pdsnickles

My Computer

System One

Pompeius

New Member

My Computer

System One

pdsnickles

My Computer

System One

Airbot

---------------

My Computer

System One

pdsnickles

My Computer

System One

H2SO4

A bit of a numpty

My Computer

System One

SCSIraidGURU

New Member

My Computer

System One

pdsnickles

My Computer

System One

pdsnickles

My Computer

System One