recently a process named "generic host process for win32 services" with filename svchost.exe keeps popping up in my firewall asking permission to reach a number of ips. it is not one or two but dozen times in a few seconds.
is it safe to let it go thru my firewall and what app would invoke this thing?
I have checked for viruses and adwares but turned out nothing and other apps would use their real firenames in asking permission of my firewall.
It's a service that other programs use to connect to the internet. The following description might make it clearer.
A generic host process is a name that Windows gives to many different services running on the computer that don't have any other name. An example of a generic host process is svchost.exe. Should you block a generic host process?
Typically svchost or any of the other generic host processes should be permited, at least temporarily.
Please be aware that some viruses and/or Trojans can infect or replace svchost.exe, so svchost.exe then becomes a virus. However, any modern antivirus software can detect when svchost.exe (or any other generic host process) becomes a virus, and stop it from doing any harm. We recommend scanning your computer for viruses at least once a week.
Is there a way to see a list of the services being associated with svchost?
If your operating system is Windows XP then you can view a list of the services using the following instructions.
Click on the Start button and go to the Run line. Type "cmd" without the quotation marks and click the "OK" button. Type "tasklist /svc" (without the quotation marks). Hit the "Enter" button on your keyboard to run the above command
What is meganova.? Does it need to connect to the internet to work? Generally if the program dose not require net access to work you can go ahead and block it. Oh and do not give it server access.
i am using xp sp2 fully updated.
i tried using the dos command as you suggested but all i got was that tasklist was not a valid command internal, external, etc.
i understand that svchost.exe is used as a generic means for access. what i want to know is why when i am not using any process that requires the access. i do updates manually. is this just microsoft? right now i am mostly researching utilities, etc so that i can protect my kids' computer (as they go everywhere they shouldn't).
17 years! In my books that’s an adult. At 17 I had my 40MB HDD filled with stuff that would make me blush now. (and that was using sneaker-net file sharing)
My son is only 6 so I (we ) browse Disney, Bionicles and comic book stuff together. So it’s a total different ballgame.
Im 17 myself and ive got a 500 gig drive that is full of said material
back to the topic it is possible that for some reason your computert is trying to update and your firewall is trying to stop it its very strange it would explain the symptons but most firewalls are automatically set up to stop this its really hard to tell you what is happening without the exact message