WIN32 Acting as Server?

[Gary]

Get a new ZoneAlarm Message:

Generic Host Process for WIN32 Services Trying to Act As a Server
Application: svchost.exe
Source IP: 0.0.0.0: Port 135

I have no idea what this means. I'm running XP Home with ZoneAlarm and Norton Anti-Virus. All of the XP Service Packs are installed and the Anti-Virus and Zone Alarm updates are current. This just started happening a few days ago. Only happens when I log into XP. I've always clicked the "deny" button, but is there a way to stop getting the pop up alerts? ZoneAlarm does not have any additional information.


Gary

 

[Greebo]

svchost is just a dll loader - its almost impossible to tell what dll its being loaded, but you almost never want it to be allowed. If virus checking isn't picking it up, download and run both AdAware and Spybot (1.4 I believe is the new current version). AdAware is found at http://www.lavasoftusa.com and spybot is http://www.safer-networking.org/en/download/index.html

Good luck!

 

[mikea]

What Chuck said. Check to see that you didn't get some scumware installed that is trying to make your PC into a bot for spammers.

Port 135 is the generic Windows services port. Could it be that you turned on file or printer sharing in last few days?