Re: ZoneAlarm - How to identify Generic Host Process Origin?

From:
Date: 10/28/02


Date: Mon, 28 Oct 2002 06:42:47 +0300


bgc wrote:

> Hello,
> I've got ZoneAlarm running on my Windows XP system. It shows 3 instances
> of "Generic Host Process for Win32 Services" running, including one that is
> listening to TCP port 5000. Is there any way to identify the origin of each
> of these entries, i.e. what program or dll started each one?
>
> Thanks,
> BGC

It sound like you didn't disable the services Windows installs by default.
Three Trojan Horses run on port 5000 and also does UNCP.

Tracker



Relevant Pages

  • Re: Generic Host Process for Win32 Services Error
    ... Uninstall this Hotfix and reboot and then run your computer and see what ... Update for Windows XP ... "Generic Host Process for Win32 Services has encountered ...
    (microsoft.public.windowsxp.help_and_support)
  • XP Media Center Generic SvcHost Error
    ... Reposting Question from XP Media Center to XP Help and Support at ... When PC boots and windows loads, there is an immediate message launched. ... Generic Host Process for Win32 Services ... If you leave the DEP message up, ...
    (microsoft.public.windowsxp.help_and_support)
  • Generic Host Error on Win XP Media 5.1
    ... When PC boots and windows loads, there is an immediate message launched. ... Generic Host Process for Win32 Services ... If you leave the DEP message up, ...
    (microsoft.public.windows.mediacenter)
  • Re: ZoneAlarm - How to identify Generic Host Process Origin?
    ... > I've got ZoneAlarm running on my Windows XP system. ... >of "Generic Host Process for Win32 Services" running, ... >listening to TCP port 5000. ... Generic host process on port 5000 is the UPnP service. ...
    (comp.security.firewalls)
  • Re: Data Execution Prevention
    ... Error messages when you start a Windows XP-based computer and then try to download Windows Updates ... Generic Host Process is actually svchost.exe. ... I looked in services and could not find Win32 Services or Generic Host ...
    (microsoft.public.windowsxp.security_admin)