Re: Zone Alarm and DNS?
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.security.firewalls archive

Re: Zone Alarm and DNS?

From: Duane Arnold <Notme@notme.com>
Date: Tue Jun 28 2005 - 23:15:51 CEST

skull_leader7@yahoo.com wrote:

> Just recently installed Zone Alarm. After doing so, I noticed that
> sometimes IE and Firefox DNS lookups are failing (and probably other
> programs too, haven't checked yet). Checking the Zone Alarm logs, I
> see blocked access attempts that include the DNS server's IP address
> and reference srvhost.exe What's going on here? I hit "allow" for
> both Firefox and IE when I was first prompted to.

It seems to me that you have *blocked* the messenger for the O/S svchost.exe
that does many things for the O/S and programs one being communications on
the network. The Internet is a network. I don't know what leads people to
start blocking or messing around with svchost.exe it's just the messenger.
The O/S and other programs including malware can use svchost.exe on their
behalf and it's not svchost.exe that making the request for communications.

One should find out what's using the messenger and kill it and not kill the
messenger.

http://www.neuber.com/taskmanager/process/svchost.exe.html

If svchost.exe is not running out of the System32 directory when it's
running, then you have a problem as it's Trojan. That's the c
\winnt\system32 or c:\windows\system32 directory on the Win NT 4.0, 2K, XP
and 2K3 O/S.

http://windowsxp.mvps.org/svchost.htm

Duane :)

 
Received on Thu Sep 29 19:57:10 2005