wininit.exe - Safe to allow connection or not?

Hello.

I've always been using Windows built-in firewall for years but decided to try one that's reasonable. I tried Comodo Firewall and everything seems to work fine.
But these past 2-3 days, i've been getting alerts about wininit.exe trying to receive a connection or something to that extend. - C:\Windows\System32\wininit.exe -

I'm really clueless with stuff like these so i did a couple google search and there's mixed opinions from users. I just need some confirmation from the professionals here.

I did a search for the IPs that is trying to send a connection to wininit.exe and they're from Asia. Such as Japan, Hong Kong and Taiwan.

Some expert opinions would be appreciated.


Edit :
Forgot to mention, i have a few similar logs in Eventviewer too. No idea what it means. ( Image #3 )

Danny

This is why people shouldn't be using firewalls like this. They get paranoid over normal system files.

Pichu said:

allow it, nothing bad will happen =) it is just a normal process.
I would suggest windows firewall instead of any third party solutions.
In addition, if you have a router, you already have hardware firewall. Cheers!

Cheers for the clever and straight-forward response.
I'm not on a router unfortunately.

I might consider removing the firewall since it's asking me way too much questions.
Eset Smart Security seems to be a better alternative since i've used it before and feels comfortable with it.


Cheers.

Pichu said:

I think that is a well-informed and good solution. Eset is a good company and Im sure their firewall is much less intruding. Don't you just hate the firewall that notifies you every minute?

It's good if it's asking the 'important' stuff but not everything.
I've been using Eset for a long time before this and it never actually asked me
to allow or block anything before. But i'm sure it's working fine since i've never got into any sort of trouble with the program or my PC's security. :)


Cheers

Pichu said:

In any case, make sure your firewall includes both inbound and outbound protection, as both are equally important! :)

Got that. Do you have any recommendations though?
Besides Windows default and/or Comodo. I just want to try something new i guess.

Here's what i got.

On File Sharing :

Your Internet port 139 does not appear to exist!
One or more ports on this system are operating in FULL STEALTH MODE! Standard Internet behavior requires port connection attempts to be answered with a success or refusal response. Therefore, only an attempt to connect to a nonexistent computer results in no response of either kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's very cool!) which represents advanced computer and port stealthing capabilities. A machine configured in this fashion is well hardened to Internet NetBIOS attack and intrusion.

Unable to connect with NetBIOS to your computer.
All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet.

On Common Ports :

Your system has achieved a perfect "TruStealth" rating. Not a single packet — solicited or otherwise — was received from your system as a result of our security probing tests. Your system ignored and refused to reply to repeated Pings (ICMP Echo Requests). From the standpoint of the passing probes of any hacker, this machine does not exist on the Internet. Some questionable personal security systems expose their users by attempting to "counter-probe the prober", thus revealing themselves. But your system wisely remained silent in every way. Very nice.

Everything shows as : There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!


On All Service Ports : Everything is in Green ( Stealth )

All these was done after i turn off Comodo Firewall.