G
Goldenwood
At least 15 times a day (more lately) I get a Alert
warning from my Norton's Antivirus and internet protection
advising me of another system trying to make contact with
mine. The Alert says "A remote System is attempting to
access Microsoft generic host process for WIN32 service on
your computer" and sometimes it says "A program named
Microsoft Generic host Process for win32 service is
attempting to connect to a computer at (it then gives the
address) one of the last one was 216.192.104.36:23554
using port 1026 (it almost always uses port 1026 if that
has anything to do with it). I do know that what ever this
service is, it's trying to do it to the svchost.exe
because the Alret always advises that it is inbound to
that point (again this may be important).
It always then says this is a low risk based on that no
virus was found and that Microsoft is a trusted company. I
then have the option of permitting this, blocking this or
getting more information on this before deciding. I always
choose to get more information.
(While I was writing this it happened 4 times and this
time when I click on the IP address it was for
XO communications IP Address 64.50.53.78 )
The status of the alert always comes up as;
No viruses found,
being Microsoft but not being digitally signed.
And that Microsoft is one of my trusted companies.
So since it's not digitally signed even though Microsoft
is one of my trusted companies I always deny access.
This is not the only company, many times it is companies
from Asia, Europe you name it. Is Microsoft allowing these
companies to do this service for them? If so why are these
not digitally signed. What is WIN32? And what is the
service that needs to be done on WIN32.
I check on updates for my system every few days, and
actually have the system set to go to your site and
download any new critical updates and service packs that I
don't have. I'm also very proficient at doing my
maintenance, analyzing the system and defragmenting when
it says to. I'm not sure what this service for win32 is
but, if I'm doing all my updates and doing my system
maintenance regularly, what is it that this does or would
do that I am not doing.
I am at my wits end trying to figure this out. I've tried
contacting Dell and due to a language barrier several
times I just can't understand their support tech's. Most
of them keep having me remove things from my start menu
but then when it still happens they have me put them back.
I contacted my IP and they advised me to look up Q250320
on this site and this should explain it to me. I did but
still being new to using a computer I really can't make
heads or tails of what this Q250320 is actually saying or
if it's even about this WIN32 service.
Any help would be greatly appreciated, but please be a
specific as possible with your replies because I am still
learning all this computer stuff and get confused easily.
Thanks,
Goldenwood
warning from my Norton's Antivirus and internet protection
advising me of another system trying to make contact with
mine. The Alert says "A remote System is attempting to
access Microsoft generic host process for WIN32 service on
your computer" and sometimes it says "A program named
Microsoft Generic host Process for win32 service is
attempting to connect to a computer at (it then gives the
address) one of the last one was 216.192.104.36:23554
using port 1026 (it almost always uses port 1026 if that
has anything to do with it). I do know that what ever this
service is, it's trying to do it to the svchost.exe
because the Alret always advises that it is inbound to
that point (again this may be important).
It always then says this is a low risk based on that no
virus was found and that Microsoft is a trusted company. I
then have the option of permitting this, blocking this or
getting more information on this before deciding. I always
choose to get more information.
(While I was writing this it happened 4 times and this
time when I click on the IP address it was for
XO communications IP Address 64.50.53.78 )
The status of the alert always comes up as;
No viruses found,
being Microsoft but not being digitally signed.
And that Microsoft is one of my trusted companies.
So since it's not digitally signed even though Microsoft
is one of my trusted companies I always deny access.
This is not the only company, many times it is companies
from Asia, Europe you name it. Is Microsoft allowing these
companies to do this service for them? If so why are these
not digitally signed. What is WIN32? And what is the
service that needs to be done on WIN32.
I check on updates for my system every few days, and
actually have the system set to go to your site and
download any new critical updates and service packs that I
don't have. I'm also very proficient at doing my
maintenance, analyzing the system and defragmenting when
it says to. I'm not sure what this service for win32 is
but, if I'm doing all my updates and doing my system
maintenance regularly, what is it that this does or would
do that I am not doing.
I am at my wits end trying to figure this out. I've tried
contacting Dell and due to a language barrier several
times I just can't understand their support tech's. Most
of them keep having me remove things from my start menu
but then when it still happens they have me put them back.
I contacted my IP and they advised me to look up Q250320
on this site and this should explain it to me. I did but
still being new to using a computer I really can't make
heads or tails of what this Q250320 is actually saying or
if it's even about this WIN32 service.
Any help would be greatly appreciated, but please be a
specific as possible with your replies because I am still
learning all this computer stuff and get confused easily.
Thanks,
Goldenwood