"Generic Host Process for Win32 Services"

[Jim]

Periodically my Zone Alarm Firewall has recently started asking if I
should allow the subject program to act as a server to the internet.
I don't know what this program does. The URL's that pop up are
different with each request (even the front end of the URL). Any idea
what this might be and if it's definitely safe or unsafe to say
"yes".

TIA
Jim

 

[Bruce Chambers]

Periodically my Zone Alarm Firewall has recently started asking if I
should allow the subject program to act as a server to the internet.
I don't know what this program does. The URL's that pop up are
different with each request (even the front end of the URL). Any idea
what this might be and if it's definitely safe or unsafe to say
"yes".

TIA
Jim

A Description of Svchost.exe in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q314056

Do you have WinXP configured to automatically check for updates,
and how often? Do you have WinXP configured to synchronize its system
time with an atomic clock, and how often? Both of these activities, and
others, would require Internet access. However, there's normally no need
for the Service Host to act as a server; I'd suggest that you set
ZoneAlarm to always block that function.


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH

 

[Jim]

A Description of Svchost.exe in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q314056

Do you have WinXP configured to automatically check for updates,
and how often? Do you have WinXP configured to synchronize its system
time with an atomic clock, and how often? Both of these activities, and
others, would require Internet access. However, there's normally no need
for the Service Host to act as a server; I'd suggest that you set
ZoneAlarm to always block that function.

Thanks. I do have windows update automatically check for and download
updates. I have download, but not install, and so the time is
grayedout. Don't know how to find the frequency with which it checks.
And an HP checktime program that runs at startup.

The last two requests I got, at start-up the URL ended in .DNS and
later in the session it came up again with a different URL ending in
DHCP.

I'll keep the server function blocked.