Wilf <wilf.wilf@wilf21.com> wrote in news:dhgvj3$p3d$1
@nwrdmz01.dmz.ncs.ea.ibs-infra.bt.com:
> A couple of times lately, ZA Free has popped up to tell me that Generic
> host Processor "wants to act as a server". I have disallowed this -
> should I have accepted? Why would svchost want to act as a server? I
> presume this means someone or something out there is trying to connect
> to my PC?
Svchost.exe Generic Host Process is just the messenger for the O/S and
other non O/S programs that need to communicate on a network such a LAN
or WAN/(the Internet). SVChost acts on the behalf of other programs for
communications and it is not the one who wants communications but only
provides the means for the communication. If you understand the concept
of solicited and unsolicited traffic and how a FW or PFW works with this
concept, then you will know that a program (not svchost.exe) on the
machine has made a solicitation behind the PFW and svchost.exe is
providing the means for the connection.
You should find out what is trying to use the messenger (svchost.exe) and
determine if it is legit or not instead of killing the messenger. Most
likely, it is just another case of Application Control in a PFW solution
whining about nothing. :)
Duane :)
Received on Sat Oct 15 04:35:29 2005