Computing.Net > Forums > Security and Virus > Trojan/-Generic Host Process

Trojan/-Generic Host Process

Reply to Message Icon

Original Message
Name: Sam Young
Date: January 29, 2003 at 03:51:06 Pacific
Subject: Trojan/-Generic Host Process
OS: Win XP
CPU/Ram: 1.1/512
Comment:

Recently there has been unauthorised use of my ADSL ISP account on four seperate occasions. On each occasion i changed my password, multiple letters and numbers.

However this continues to happen.
I have scanned the system with full, updated versions, of Norton 2002/2002, panda online scan, and mcaffee online scan.
I have also mapped the drive accross lan, and scanned with norton from a 'clean' system. On all occasions i have detected nothing.

As of yesterday i installed zonealarm pro.
From a fresh boot, this is what is accessing the net.

Generic Host Process for win32 services
listening to ports:TCP: 3003,3002 UDP:53,67

Generic Host Process for win32 services
listening to ports:TCP: 2869, 5000

These are marked down as two seperate processes.
Is this normal?!?


Report Offensive Message For Removal


Response Number 1
Name: EC
Date: January 30, 2003 at 13:07:26 Pacific
Reply: (edit)

Those are part of Windows XP (svchost.exe)
With Zone Alarm Pro, you can block them easily, but I have known some where it prevented their internet access.
As far that being your culprit, that would make Microsoft or trojan attached to that service illegally.


Report Offensive Follow Up For Removal







Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: Trojan/-Generic Host Process

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software




Have you ever used OpenOffice?

Yes, as my main suite.
Yes, occationally.
Yes, but only once.
No, never.


View Results

Poll Finishes In 5 Days.
Discuss in The Lounge