Re: Zone Alarm and DNS?

From: Duane Arnold (Notme_at_notme.com)
Date: 06/28/05

  • Next message: T. Sean Weintz: "Re: Zone Alarm and DNS?"
    Date: Tue, 28 Jun 2005 21:15:51 GMT
    
    

    skull_leader7@yahoo.com wrote:

    > Just recently installed Zone Alarm. After doing so, I noticed that
    > sometimes IE and Firefox DNS lookups are failing (and probably other
    > programs too, haven't checked yet). Checking the Zone Alarm logs, I
    > see blocked access attempts that include the DNS server's IP address
    > and reference srvhost.exe What's going on here? I hit "allow" for
    > both Firefox and IE when I was first prompted to.

    It seems to me that you have *blocked* the messenger for the O/S svchost.exe
    that does many things for the O/S and programs one being communications on
    the network. The Internet is a network. I don't know what leads people to
    start blocking or messing around with svchost.exe it's just the messenger.
    The O/S and other programs including malware can use svchost.exe on their
    behalf and it's not svchost.exe that making the request for communications.

    One should find out what's using the messenger and kill it and not kill the
    messenger.

    http://www.neuber.com/taskmanager/process/svchost.exe.html

    If svchost.exe is not running out of the System32 directory when it's
    running, then you have a problem as it's Trojan. That's the c
    \winnt\system32 or c:\windows\system32 directory on the Win NT 4.0, 2K, XP
    and 2K3 O/S.

    http://windowsxp.mvps.org/svchost.htm

    Duane :)

     


  • Next message: T. Sean Weintz: "Re: Zone Alarm and DNS?"

    Relevant Pages

    • Re: Firewall Setup...
      ... Svchost.exe is just the messenger for the O/S and other programs ... > svchost.exe is to provide the communication plumbing for the connection. ... > one try to find what's using the messenger and kill it? ...
      (comp.security.firewalls)
    • Re: Firewall Setup...
      ... > program from accessing the Internet, it seems to stop Internet activity. ... Svchost.exe is just the messenger for the O/S and other programs ... svchost.exe is to provide the communication plumbing for the connection. ...
      (comp.security.firewalls)
    • Re: msmsgs.exe
      ... or to start Messenger? ... O/S version. ... >>> Anybody here have a permanent fix. ... > Permanently deleting what? ...
      (alt.comp.hardware.pc-homebuilt)
    • Re: ZA Free and Generic Host Processor
      ... >> and determine if it is legit or not instead of killing the messenger. ... solicitation, and again, it was not svchost.exe the that ... It could be legit too. ... stops with the O/S and not ZA. ...
      (comp.security.firewalls)