Using Zone Alarm. Blocked Access. Outgoing. Program= Automatic Live
Update Module using Live Update Engine Com module to connect to.....
Destination Dns:   dns-cac-02.rdc-nyc.rr.com .  IP: 24.29.99.15:53.
Question Is this question much to revealing. Question2: Should I allow
access? that is how do I know it is a legitimate request. I am a cable
Road Runner (nyc) user.

Firstly, doing a whois lookup from domainmonger
(http://www.domainmonger.com/cgi-bin/whois.cgi) of the rr.com domain,
it says it is owned by road runner, so that would most likely be your
computer's address. the ip address also belongs to that dns address,
so again those numbers constitute your computer's address.

More importantly is the program name and the port number used. It
seems a connection was trying to be made on port 53.

Iana.org reports that this port number is used for the following: 
http://www.iana.org/assignments/port-numbers 

domain           53/tcp    Domain Name Server

This means that whatever program that was running when the connection
was blocked was trying to find out what computer was associated with a
certain name.

For example, your internet connections DNS name is
dns-cac-02.rdc-nyc.rr.com. In order to know how to connect to this
computer, a DNS lookup must be made, which gives a computer address of
24.29.99.15. So far, this is pretty benign.

At this point I decided to find out something about the program that
was trying to get access. My first guess was that your antivirus
software was trying to update itself. I did a quick search on google
for "Automatic Live Update Module"
(://www.google.com/search?hl=en&ie=ISO-8859-1&q=Automatic+Live+Update+Module),
and found that the program associated with this name is indeed the
antivirus update program for an antivirus program called bit defender
(previously called AVX). At this point I knew why it seemed familiar,
because I run this very same antivirus program. It works pretty well
for me.

So, my answer to question 1 would be: No. You gave me just enough
information to answer your question.

And to question 2: Yes, I would allow this program to access the
internet, as it updates your virus protection.

If you need any more information regarding this, or feel I missed
something, please feel free to request a clarification and I will be
glad to assist you further.


Search strategy

search for rr.com at http://www.domainmonger.com/cgi-bin/whois.cgi

http://answers.google.com/answers/main?cmd=search&q=%22port+numbers%22&qtype=all

://www.google.com/search?hl=en&ie=ISO-8859-1&q=Automatic+Live+Update+Module

exceptionally clear answer to my question. Feel more secure in
allowing program acces. I am particularly grateful for the search
strategy provided as part of my answer. I have learned something new
and useful. My gratitude to funkywizard-ga.

BS"D

I also wanted to thank you for a clear answer.  Pickid it up on a
search for the same reason

M

thanks. I'm glad it was helpful.