[thelist] Update:still fighting the trojan...

[David Greig]

Hi Janet

The generic host process, svchost.exe, runs services on your Windows XP/2000
computer.  It runs services that are run as DLLs, and is basically just a
wrapper for those services.  This generic process starts and runs services
on your computer.  You can view the services started by this process under
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost.
You might see a trojan under there somewhere, but I doubt it.

So - to sum up - allow the generic host process internet acces through
ZoneAlarm, its a system process and pretty safe to give it access.

Regards
Dave



-----Original Message-----
From: Janet FitzGerald [mailto:waxplanet at sunflower.com]
Sent: Monday, 4 February 2002 11:49 AM
To: thelist at lists.evolt.org
Subject: [thelist] Update:still fighting the trojan...


Hello friends,

I've tried four scans (different software) and none of them are finding
any virus, Trojan, worm, or what have you. This does not leave me
feeling confident since the firewall is finding all sorts of
"violations".  Anyway, I'm wondering about a "program" listed in
ZoneAlarm that is called Generic Host Process for Win32 Service.  I have
no idea what this is, though I do know that I can't access pages on the
net without it accessing the net.  I have to Unlock the padlock to get
online, in other words.  I did an internet search for this, went to the
Microsoft KnowledgeBase...nothing.  Does anyone have a clue about this?


Thanks so much,
Janet

--
For unsubscribe and other options, including
the Tip Harvester and archive of thelist go to:
http://lists.evolt.org Workers of the Web, evolt !