svchost.exe

[Dave]

Running XP home with Norton Internet Security.

I keep getting a warning from Norton as follows:

"A remote system is trying to access Microsoft Generic Host Process for
Win32 on your computer" at C:\windows\system\svchost.exe UDP (Inbound).

Norton recommends to permit, but up to now I've blocked this.

I've read what Microsoft and Symantec have to say about this on their sites,
but I'm obviously missing something because I still can't decided what's
happening, and more to the point, is it safe!

Perhaps someone on here could advise.

Thanks
Dave

 

[wojo]

Do not allow it access. Permanently block access.

http://www.sysinfo.org/startuplist.php?filter=svchost.exe



--
If I can help you I will.
If you can help me thanks.
(e-mail address removed)
TO Email: Remove "SPAM" without the quotes

Useful Links
AdAware:
www.lavasoftusa.com/software/adaware/
Spybot S & D:
www.safer-networking.org/
Check for Parasites/Worms:
www.gemal.dk/browserspy/parasites.html
Blaster Security Patch:
http://www.microsoft.com/security/incident/blast.asp
TweakUI and other PowerToys:
www.microsoft.com/windowsxp/pro/downloads/powertoys.asp

 

[chp]

Scan with norton and spybot with the latest update install, result of both
scan - did'nt find any virus, but the warning message keep appearing every 2
to 5 minutes,from my norton firewall when surfing the net. Should I delete
the 'svchost.exe' manually and where can I find info regarding how to
proceed. Thanks in advance. Using WinXp Professional

 

[wojo]

Don't delete svchost.exe XP needs this file.
You ran spybot but I still suggest also running adaware:
AdAware:
www.lavasoftusa.com/software/adaware/
and check this site out if it detects a worm it will give you step by step
instructions for manual deletion:
Check for Parasites/Worms:
www.gemal.dk/browserspy/parasites.html

If you have permanently blocked it from within Norton I am not sure why it
still keeps popping up. Norton should be blocking it automatically unless it
is a virus that has already messed up Norton.
As you can see from the link I provided earlier there are quite a few
different viruses affecting svchost.exe meaning there is more than one
answer as to how to fix it. My guess would be that replacing the svchost.exe
file is what you'll end up having to do but of this I am not certain. i have
never gotten any of these particular viruses. Hopefully, if what I've
already outlined doesn't work, somebody else here has had this experience
and can tell you how to proceed from here.

--
kwoyach[SPAM]@yahoo[SPAM].com
TO Email: Remove [SPAM]

**Useful Links**
Spybot S & D:
www.safer-networking.org/
Blaster Security Patch:
http://www.microsoft.com/security/incident/blast.asp
TweakUI and other PowerToys:
www.microsoft.com/windowsxp/pro/downloads/powertoys.asp

If I can help you I will.
If you can help me thanks.