firewall question

[Ken Doebler]

I have two programs in my system32 directory that want access to the
internet. They are svchost.exe and services.exe. Should I allow
these programs to access the internet? They also want "server" rights
in ZoneAlarm. Is this ok also? My Norton anti-virus updater doesn't
seem to work right without these programs enabled to internet access.

 

[Jim Carney]

sounds like a virus. go get updated def files, and sweep
your system. also use the MS03-026 patch to deal with the
msblast worm thats out.

 

[Steve Parry [MVP]]

In

I have two programs in my system32 directory that want access to the
internet. They are svchost.exe and services.exe. Should I allow
these programs to access the internet? They also want "server" rights
in ZoneAlarm. Is this ok also? My Norton anti-virus updater doesn't
seem to work right without these programs enabled to internet

access.

take a look here just in case

http://www.europe.f-secure.com/v-descs/msblast.shtml

although the removal tool link is incorrect ... it should be

ftp://ftp.f-secure.com/anti-virus/tools/F-Lovsan.zip

 

[Bruce Chambers]

Greetings --

They do need Internet access if you've set your system to check
for updates automatically, but you shouldn't allow them to act as
servers. Set ZoneAlarm to allow outbound traffic only.

Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

I have two programs in my system32 directory that want access to the
internet. They are svchost.exe and services.exe. Should I allow
these programs to access the internet? They also want "server" rights
in ZoneAlarm. Is this ok also? My Norton anti-virus updater doesn't
seem to work right without these programs enabled to internet

access.

 

[Ken Doebler]

Ok, thanks Bruce. I'll set ZoneAlarm up so they don't act as servers.
I was wondering about that. I had them acting as servers.