Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Hey is someone know what's up with that program that keep sending information to Microsoft when we boot?

It isn't SENDING information to MS, it's GETTING information from MS... More specifically it's querying the NTP server at TIME.WINDOWS.COM to synchronize your PC clock.
Take a peek at the DATE/TIME applet and look under the INTERNET TIME tab.

If that's all it does is check the date/time, why is it if you block it's access to the internet, then ALL outbound internet traffic stops. the only way to allow outgoing internet access is to allow that file to access the internet.
Secondly, why does it want to set up a server? If all it needs is to get the date/time, then there's no need to set your comptuer up as a server.
Sorry, but the date/time theory doesn't wash with me :-(

In addition, I've checked the tab, and it says next time to check is 11pm tonight (being 1am now) - and it's still sending/receiving data!

Thought this might help some people.
This is the URL to a MS page about svchost.exe.....
http://support.microsoft.com/support/kb/articles/Q250/3/20.ASP
PS: I was concerned when my ZoneAlarm said the "Generic Host Process for Win32 Services was 'Listening' to Ports [TCP]Port 5000 and [UDP] Port 1900".
Seeing as Port 5000 is a known Trojan port (Backdoor Setup,Blazer5,Bubbel,IC Killer,Ra1d,etc.)...
*Hopefully it's ONLY Microsoft's own little 'Trojan'(svchost.exe)...

Doesn't explain these :-
Generic Host Process for Win32 Services tried to ***send*** data to the Internet (239.255.255.250), but was denied access by the Internet Lock.
Generic Host Process for Win32 Services tried to receive data from the Internet (213.120.62.100), but was denied access by the Internet Lock.
there's no program needing internet access, yet it does access every couple of minutes! Yes, couple of minutes. If I try to block it, nothing on the internet loads.
Me think Microsoft is doing a lot of spying with this new program.

I just installed XP pro and the first thing I did was install Norton firewall 2002. After set up of DSL and connecting to the internet firewall warned me of 'genaric host process for win32'. What is that? I never had ths with 98se. should I block it?Does this have something to do with svchost.exe?

This program is not new to winxp... it was on win2k and win2k server. When I block this file I am able to browse the internet but icq and eudora no longer work. I am not to over concerned with it but plan on learning more.

Take a look at this. http://vil.mcafee.com/dispVirus.asp?virus_k=99202&
This may be your case...

Well the Time has nothing to do with it that is certain.
But my internet stops as well when i don't allow it to go on.
For the Virus i think you need a file called httpext.dll, I don't have this file.
Still I think Microsoft has to be involved.
If anyone knows more about it, please report.
greetings from Edu

Hi friends,
i have noticed, that if you stop the process called "network service", about one of the four svchost process normally running in the xp system, you can surf with only the 80 port opened.Thats fun but not very comprensible........
or is not?
Bye

I had the same problems after upgrading to winxp, if access to the internet was denied to the Generic Host then it denied me access to the internet. What I have now done is ctrl alt del to bring up the running processes and end task on any svchost.exe, by doing this I was able to immediately gain access to the internet without this program wanting to gain access.This programm obviously runs at start up and will need to be stopped prior to going on internet.

Alright, this it what's going on with me... i formatted a while ago, and installed xp.. it's working great and all, but not too long ago i installed norton system works with all of the things, and on one of the options in the norton utilities is one that says something about a security check. I ran the program, and what it did was just test my ports. It said that I have a trojan (sockets de troie, port 5000), so i got kind of worried. I downloaded a bunch of trojan removal programs, added to AVP and NAV (both up-to-date) and nothing.. no viruses, no trojans. I also have ZoneAlarm Pro as a firewall, and there i saw that Generic Host Processes was "listening" on port 5000, which seemed kind of strange. A few times I try to deny access to it, but I would not be able to check my email through Eudora. There didn't seem to be any major trafic through that port, but i was still worried. Now, i denied this thing access, and the internet seems to be working fine, although i keep doing this internet security check somewhat regularly, and every time i do it it says the same thing, port 5000 sockets de troie is open. What the hell is going on??? I'm really worried. If anyone has any possible solutions, i would really apretiate it. Thanks a lot!

Alright so the damn thing take sup 20 MB of my 256MB of RAM. I use windowsblinds and checking with them they say that programs like windowslbinds and style xp both use dlls to load skins and the skins are stored in svchost.exe there are more than one svhost.exe because they do different things. I noticed that using the msconfig MS has a snmp a serv and more stuff running on my computer that i dont want. apparently you can just disable these things and you will basically be invisible to the internet. the clock update thing is also somewher ein there. note i simply use the firewall that comes with xp and it blocks the ports completely and very well. that is all i know right now except i hate this damn thing.
colin

hello;
i had the same problem jsut disable the clock option thats comunicates with microsoft and you will have your problem solved

![]() |
Dual boot win98/winXP, re...
|
To all XP gamers
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |