what is this ??

Discussion in 'other firewalls' started by eyespy, Jun 26, 2002.

Thread Status:
Not open for further replies.
  1. eyespy

    eyespy Registered Member

    Joined:
    Feb 20, 2002
    Posts:
    490
    Location:
    Oh Canada !!
    I recently installed XP on my PC. ZA Pro is alerting me that "GENERIC HOST PROCESS FOR WIN32 SERVICES" is trying to connect from my PC to the Internet ! What is this "new" alert ?? Never had it while using Win98SE .
    Also, what is an "IGMP" protocol ? Received a few of those alerts as well !

    thanks and regards,
    bill :)
     
  2. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
  3. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    As Paul indicated this could be several things. My guess would be: XP is checking if there are any updates available.

    Regards,

    Pieter
     
  4. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    That's for sure, Pieter! If blocked, one has to manually check for - download and install these ;)

    regards,

    paul
     
  5. controler

    controler Guest

    Windows ME and XP and most other software do auto look for updates by default on install.
    I always turn auto update off on all my software.
    That's just me though. If you don't turn them off , you either have to put up with the alert everytime it access the internet or Tell the firewall to always allow it. Don't we like to be in control as to when a program access the internet?
     
  6. JacK

    JacK Registered Member

    Joined:
    Jun 20, 2002
    Posts:
    737
    Location:
    Belgium -Li?ge
    hi,
    On NT system, svc.hosts.exe are a kind of laucher to monitor different programs.

    Enter tasklist /svc to see which ones and tasklist /? to see the other commuters.

    No need to allow access to the W3 for any svc.hosts.exe. Everything runs without permiting OUT

    Have a look here about : http://www.blkviper.com/WinXP/servicecfg.htm

    http://www.les-smileys.inforum-city.com/diables/blueScreen_D.gif
     
  7. eyespy

    eyespy Registered Member

    Joined:
    Feb 20, 2002
    Posts:
    490
    Location:
    Oh Canada !!
    Thank you all for the responses! It's good to know that "GENERIC HOST PROCESS FOR WIN32 SERVICES" is NOT a threat to my security. I'm still finding my way around XP...GRRR !
    I can't seem to find Win XP's auto update feature. Would like to turn it off ! :D
    Thanks again,
    bill
     
  8. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    Maybe there is an easy way, but Atomic (downloadable at: http://www.xp-erience.org/article.php?sid=734 ) can do it for you and lots more.

    Regards,

    Pieter
     
  9. spy1

    spy1 Registered Member

    Joined:
    Dec 29, 2002
    Posts:
    3,139
    Location:
    Clover, SC
    "WARNING: THIS IS TO BE USED ON A FRESH INSTALL OF WINDOWS XP PROFESSIONAL ONLY!"

    Sounds like a great program for that group, though! Pete
     
  10. eyespy

    eyespy Registered Member

    Joined:
    Feb 20, 2002
    Posts:
    490
    Location:
    Oh Canada !!
    Pieter,
    isn't their a tweaking tool already in XP ? I believe I recently typed in a string in the run menu and it brought up the tweaks that are mentioned in the "Atomic" proggie !!
    Darn, I can't remember what I typed in "run" or where I found it !!
    bill
     
  11. JacK

    JacK Registered Member

    Joined:
    Jun 20, 2002
    Posts:
    737
    Location:
    Belgium -Li?ge
    Hi,

    Among the services : disable automatic updates
    See the link in a former post about viper for all the services you may disable.

    or use : an option disable it

    XP-Antispy : http://www.xp-antispy.org/

    Rgds,

    JacK
     
  12. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    Jack is right: It´s even easier. I just don´t know the exact names of the path, but I hope you can figure it out.
    Start > Config screen > System control > Services > Automatic updates right click the appropriate service and in the dropdown menu you can stop the service.
    In the description it says something like: This stops the automatic updates, you can manually retrieve them at the windows update site.

    @ eyespy

    If you ever find that command again, I´d very much like to know


    Regards,

    Pieter
     
  13. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    Right Click----------> My Computer Icon----------->Properties--------------->Automatic Updates(on the top)-----------------> Turn off Automatic Updates.


    Technodrome
     
  14. GA

    GA Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    35
    If you don't have the "my computer" icon turned on, click start>run type services.msc and you will get to all the services that Jack is talking about ealier. There you can use the advice that blackviper has, that is pretty good.GA
     
  15. eyespy

    eyespy Registered Member

    Joined:
    Feb 20, 2002
    Posts:
    490
    Location:
    Oh Canada !!
    Pieter,
    Here is the "run command"----- gpedit.msc


    And here's the website I got it from...very good site !!
    http://www.dougknox.com/

    enjoy,
    bill

    ps.......I managed to turn of the "auto update" thanks to everyone's help ;)
     
  16. eyespy

    eyespy Registered Member

    Joined:
    Feb 20, 2002
    Posts:
    490
    Location:
    Oh Canada !!
    BTW.....
    If I don't allow "GENERIC HOST PROCESS FOR WIN32 SERVICES" to access the internet, I can't connect at all !!
    regards,
    bill
     
  17. GA

    GA Registered Member

    Joined:
    Feb 9, 2002
    Posts:
    35
    A nice feature of the global policy editor is the ability to shut off windows messenger. To get to it, open the policy editor(gpedit) expand computer configuration>administrative templates>windows components>messenger
     
  18. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    Eyespy,

    Thnx for the link. I haven't had time to read it yet, but I will make time.
    Blocking Generic Host Processes completely could result in your computer not being able to contact your ISP, wich would explain your probelms accessing the internet.
    I use SPF 5 and have settings for GHP at ask. When I start the Internet connection I have to click allow twice.
    As far as I figured out, once for registration in my home network and once for registration ISP.

    Hope this helps,

    Pieter
     
  19. JacK

    JacK Registered Member

    Joined:
    Jun 20, 2002
    Posts:
    737
    Location:
    Belgium -Li?ge
    Hello,

    No, it does not :)
    It's set on DENY TCP/UDP IN and OUT everywhere I install a FW. No need at all
    as far as it runs (you cannot kill the process anyway :))
    Cheers,

    JacK
     
  20. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    JacK,

    Is it allright if I post the popups SPF produces, tonight? (I'm at work now )
    Maybe you can take a look and tell me what's what.

    Regards,

    Pieter
     
Thread Status:
Not open for further replies.