PC Review Forums Newsgroups Windows XP Windows XP Security svchost

Reply

svchost

 
Thread Tools Rate Thread
Old 24-09-2003, 06:37 AM   #1
Robert
Guest
 
Posts: n/a
Default svchost


I have recently installed a firewall and a couple of
programs ask me for internet and server access.They are
svchost.exe and alg.exe both are in WINDOWS\System 32
folder.Is there a security problem if I say yes and what
happens if I say no? Anyone Know?
  Reply With Quote
Old 25-09-2003, 01:51 AM   #2
Wesley VogelX
Guest
 
Posts: n/a
Default Re: svchost

Robert;
At startup, Svchost.exe checks the services portion of the registry to
construct a list of services that it needs to load.may be multiple
instances. You cannot end this process from Task Manager. This is a generic
process, which acts as a host for other processes running from DLLs;
therefore, don't be surprised to see more than one entry for this process.
HAVE TO HAVE RUNNING, YES

Alg.exe. PROGRAM NAME: Application Layer Gateway.DESCRIPTION: Part of
Windows XP that provides support for ICS and Internet Connection Firewall
(ICF). RECOMMENDED ACTION: If a third-party firewall warns you that ALG.exe
wants access, check to make sure you're not double-firewalled. If you are,
disable ICF. If you are using neither ICF nor ICS and are warned that
ALG.exe is trying to access the Net, deny it. A Trojan horse or worm may be
trying to use
it as a backdoor.
Hope this helps. Let us know.
Wes

"Robert" <rrrr@ozmail.com.au> wrote in message
news:0e3501c38255$9bbb4bc0$a401280a@phx.gbl...
> I have recently installed a firewall and a couple of
> programs ask me for internet and server access.They are
> svchost.exe and alg.exe both are in WINDOWS\System 32
> folder.Is there a security problem if I say yes and what
> happens if I say no? Anyone Know?



---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.521 / Virus Database: 319 - Release Date: 9/23/2003


  Reply With Quote
Old 25-09-2003, 02:13 AM   #3
Charles May
Guest
 
Posts: n/a
Default Re: svchost

Robert,

This link may help, it allows you to see what each svchost.exe process
represents on your system.

http://support.microsoft.com/?kbid=314056


Hope this helps
Charlie


"Wesley VogelX" <123WVogel955@comcast.net> wrote in message
news:M5qcb.568294$Ho3.103966@sccrnsc03...
> Robert;
> At startup, Svchost.exe checks the services portion of the registry to
> construct a list of services that it needs to load.may be multiple
> instances. You cannot end this process from Task Manager. This is a

generic
> process, which acts as a host for other processes running from DLLs;
> therefore, don't be surprised to see more than one entry for this process.
> HAVE TO HAVE RUNNING, YES
>
> Alg.exe. PROGRAM NAME: Application Layer Gateway.DESCRIPTION: Part of
> Windows XP that provides support for ICS and Internet Connection Firewall
> (ICF). RECOMMENDED ACTION: If a third-party firewall warns you that

ALG.exe
> wants access, check to make sure you're not double-firewalled. If you are,
> disable ICF. If you are using neither ICF nor ICS and are warned that
> ALG.exe is trying to access the Net, deny it. A Trojan horse or worm may

be
> trying to use
> it as a backdoor.
> Hope this helps. Let us know.
> Wes
>
> "Robert" <rrrr@ozmail.com.au> wrote in message
> news:0e3501c38255$9bbb4bc0$a401280a@phx.gbl...
> > I have recently installed a firewall and a couple of
> > programs ask me for internet and server access.They are
> > svchost.exe and alg.exe both are in WINDOWS\System 32
> > folder.Is there a security problem if I say yes and what
> > happens if I say no? Anyone Know?

>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.521 / Virus Database: 319 - Release Date: 9/23/2003
>
>



  Reply With Quote
Old 25-09-2003, 02:21 AM   #4
Wesley VogelX
Guest
 
Posts: n/a
Default Re: svchost

Charles;
Thanks for your reply. Went to the link you provided. After opening
cmd. Type Tasklist /SVC, and then press ENTER. Does not work for me.
This is only for XP Pro. I have XP Home. I am a little disappointed,
as I wanted to see what each process was doing under svchost.exe. I usually
have at least three svchost's running at ant one time.
Wes

"Charles May" <quarantine1@hotmail.com> wrote in message
newsqqcb.567453$YN5.401678@sccrnsc01...
> Robert,
>
> This link may help, it allows you to see what each svchost.exe process
> represents on your system.
>
> http://support.microsoft.com/?kbid=314056
>
>
> Hope this helps
> Charlie
>
>
> "Wesley VogelX" <123WVogel955@comcast.net> wrote in message
> news:M5qcb.568294$Ho3.103966@sccrnsc03...
> > Robert;
> > At startup, Svchost.exe checks the services portion of the registry

to
> > construct a list of services that it needs to load.may be multiple
> > instances. You cannot end this process from Task Manager. This is a

> generic
> > process, which acts as a host for other processes running from DLLs;
> > therefore, don't be surprised to see more than one entry for this

process.
> > HAVE TO HAVE RUNNING, YES
> >
> > Alg.exe. PROGRAM NAME: Application Layer Gateway.DESCRIPTION: Part of
> > Windows XP that provides support for ICS and Internet Connection

Firewall
> > (ICF). RECOMMENDED ACTION: If a third-party firewall warns you that

> ALG.exe
> > wants access, check to make sure you're not double-firewalled. If you

are,
> > disable ICF. If you are using neither ICF nor ICS and are warned that
> > ALG.exe is trying to access the Net, deny it. A Trojan horse or worm may

> be
> > trying to use
> > it as a backdoor.
> > Hope this helps. Let us know.
> > Wes
> >
> > "Robert" <rrrr@ozmail.com.au> wrote in message
> > news:0e3501c38255$9bbb4bc0$a401280a@phx.gbl...
> > > I have recently installed a firewall and a couple of
> > > programs ask me for internet and server access.They are
> > > svchost.exe and alg.exe both are in WINDOWS\System 32
> > > folder.Is there a security problem if I say yes and what
> > > happens if I say no? Anyone Know?

> >
> >
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.521 / Virus Database: 319 - Release Date: 9/23/2003
> >
> >

>
>



---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.521 / Virus Database: 319 - Release Date: 9/23/2003


  Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off