After the problem with ZoneAlarm true vector the other day, now on every computer startup, my ZoneAlarm Pro keeps asking me these questions which it has never asked before. It wants to know if I want to allow them server rights. I have listed them below. I have temporarily blocked them for now. Should I give these server rights? They are incoming, not the outgoing. 1)Description Generic Host Process for Win32 Services requested permission to access the internet. Rating High Date / Time 2005/06/12 16:56:10-7:00 GMT Type Repeat Server Program Program C:\WINDOWS\System32\svchost.exe Source IP 0.0.0.0:135 Destination IP Direction Incoming (listen) Action Taken Blocked (once)/Manual Count 1 Source DNS Destination DNS 2) Description Generic Host Process for Win32 Services requested permission to access the internet. Rating High Date / Time 2005/06/12 16:56:08-7:00 GMT Type Repeat Server Program Program C:\WINDOWS\System32\svchost.exe Source IP 0.0.0.0:1025 Destination IP Direction Incoming (listen) Action Taken Blocked (once)/Manual Count 1 Source DNS Destination DNS 3) Description Generic Host Process for Win32 Services requested permission to access the internet. Rating High Date / Time 2005/06/12 16:56:06-7:00 GMT Type Repeat Server Program Program C:\WINDOWS\System32\svchost.exe Source IP 0.0.0.0:5000 Destination IP Direction Incoming (listen) Action Taken Blocked (once)/Manual Count 1 Source DNS Destination DNS ERROR: No Credentials You forgot to fill in the system credentials fields in your posting. Correct it below. 4) Why is computing.net site saying this when I selected the POST button? ERROR: No Credentials You forgot to fill in the system credentials fields in your posting. Correct it below. I am registered and I thought this was automatically filed in. It has always been filled in up to now. Do I have something blocked maybe? Could this have something to do with my ZoneAlarm blocking?

I would check your system for spyware. Do a Google search for: 'Description Generic Host Process for Win32 Services' and I think you will find words to the effect of: 'Added by a W32/Sdbot-O worm infection'. I personally would not allow server permissions. M

http://www.zonealarmpro.bravehost.com/prexamp.htm Hi Tammy... The addy above has some helpful info about some of the applications that pop up and ask for access/server rights. Click onto the icon on the left side of that page, and you'll see some detailed info. Although it doesn't list every single app that asks for permission, it might help or give you some assurance as to what to give permission to. Hope this helps; good luck. ~Tommyo

I couldn't figure anything out about this incoming Generic Host Process for Win32 Services anywhere. I had ran my Norton's antivirus, adaware, spybot, and Microsoft anti-spyware programs and none of them found anything wrong. I also have SpywareBlaster running too. I don't use msn messenger very often and it seemed to to be fine while it was just sitting in the tray. But yesterday when I tried to comunicate with a friend, msn messenger caused my internet connection to freeze. I figured it must have something to do with these services. So far things are good. I also noticed that it only requested to run these services on Windows startup and my ZoneAlarm log had no other atempts from these programs. So, with the small amount of logic that I have about computers, I have decided to give them temporary permission to run. I guess I will see how things go from here. ZoneAlarm has always been setup to run these programs and they are automatically configured, so this has to be a glitch with my firewall from that problem they had with their bad update, which caused them to make changes back to the previous one. Thank you both for your help.

http://forum.zonelabs.org/zonelabs/board/message?board.id=cfg&message.id=29713#M29713 Hi Tammy... I hope this "copy & paste" thing works. This is off the Zone Alarm forums, and somebody there was inquiring what programs to grant access and/or server rights; and what to always deny. Although I didn't have the chance yet to read the entire thread, I think there might be some helpful info there for you. I've had my pc for two years now, and I am still learning all this stuff too. I've come quite a ways, but I've also got a ways to go too; so that's why I am somewhat limited in responding to questions. I wouldn't want to give bad advice... I sure wish I could offer more, but I don't want to give erroneous advice. You maybe might want to take a peek at that Zone Alarm forum, as there are many good and informative posts there. If it is of any help, I never grant "server rights" to anything... I don't want any of my info going out to anything I am not 100% sure about. So I deny all server rights. By the way.. it is refreshing to read a nice legible post as yours is; some folks have difficulty spelling and typing. Good luck; take care.. ~Tommyo

Thanks Tommyo, That site has some good information with a lot of logic. I have checked my settings and they pretty well follow this same idea. However, I guess I what I really want to know is why the Generic Host Process for Win32 Services would need to be "incoming". If I could understand this I guess I would be a lot happier. I have finally found what this service is. Here is a very long read but with a lot of info and was posted at this site back in March 22, 2002. http://www.computing.net/security/wwwboard/forum/272.html I think I will leave my settings like this for a while. I have even thought of uninstalling and reinstalling my Zonealarm again in hopes it will automatically recognize this and give it the correct settings. Thank you Tommyo for the nice compliment. Sometimes I get scattered brained and not all of my posts are put together as well. The trick is to take my time and recheck things. Also, I sometimes use the spell checker in my Outlook Express when needed to help me out. lol (copy and paste)

svchost - svchost.exe - Process Information Process File: svchost or svchost.exe Process Name: Microsoft Service Host Process Description: svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated. Note: svchost.exe is a process which is registered as the W32.Welchia.Worm. It takes advantage of the Windows LSASS vulnerability, which creates a buffer overflow and instigates your computer to shut down. To see more information about this vulnerability please look at the following Microsoft bulletin: http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx This is a registered security risk and should be removed immediately. Please see additional details regarding this process Generic Hosts For Win 32 Has A Problem with some firewalls and computers running Service Pack 2 Here is the patch This problem is inherent in WinXP SP2. Microsoft now has a fix available. Go to http://www.microsoft.com/downloads/details...&displaylang=en