[raybro]

I've noticed recently there is ongoing, intermittant internet activity when I'm on-line using dialup. This is a fairly new condition. The main reason it came to my attention was I've been downloading win updates from the catalog site to keep on my external drive for potential future use, and the download speed would randomly slow down.

I went into my Zone Alarm (free version 7.0.470.000) and looked at the programs currently granted permission to access the internet trusted zone. Among them was "Generic Host Process for win32 services". I changed the stauts to "Ask" and since then the intermittant activity has stopped, but I get the ZA popup asking for access by that svchost.exe executable.

I'm going to do some research on it, but thought it might be fruitful to post here and see if anyone knows what this is about and should I grant internet access to this program. ZA site does not appear to have any info on it.

Thanks... Raybro

[heskum]

TRY THIS
1. click start>run>type in “cmd” *without the qoute
2. in the command line type in netsh press enter
3. then type in winsock press enter
4. and lastly type in resset press enter
5. reboot ur pc

[raybro]

Originally Posted by heskum

TRY THIS
1. click start>run>type in “cmd” *without the qoute
2. in the command line type in netsh press enter
3. then type in winsock press enter
4. and lastly type in resset press enter
5. reboot ur pc

I understand how to use the Command Line function, but could you please explain just WHAT this specific inputs will do to or change my current configuration?

BTW... In Running processes, I have 7 incidents of svchost.exe running. 4 in SYSTEM, 2 in NETWORK SERVICE and 1 in LOCAL SERVICE. The research I've done so far indicates svchost.exe is a well known hiding place for varios types of malware, trojans and other undesirable stuff. Scans by Spybot, Adaware and AVG found nada. I've been trying to run a scan with Trend Micro Housecall, but so far have been unable to complete the process. My best guess at this point is the slooow dialup connection I'm using. I'm going to take my laptop to a friends home that has a cable hookup and try it there.

Raybro

[stantley]

The svchost.exe processes are what runs all of the Windows Services on your system.

Get Process Explorer, it's kinda like Task Manager on steroids. Right-click on one of the svchost.exe processes > Properties > Services tab and it will tell which services are running in that process. It will also give the path of each module which should be C:\WINDOWS\system32.

If all of the svchost.exe are running from C:\WINDOWS\system32\svchost.exe and all of the services are also in C:\WINDOWS\system32, you should be OK. If something is running outside of C:\WINDOWS\system32 then you might have a problem.

[raybro]

Originally Posted by stantley

The svchost.exe processes are what runs all of the Windows Services on your system.

Get Process Explorer, it's kinda like Task Manager on steroids. Right-click on one of the svchost.exe processes > Properties > Services tab and it will tell which services are running in that process. It will also give the path of each module which should be C:\WINDOWS\system32.

If all of the svchost.exe are running from C:\WINDOWS\system32\svchost.exe and all of the services are also in C:\WINDOWS\system32, you should be OK. If something is running outside of C:\WINDOWS\system32 then you might have a problem.

Thanks, Stantley... Just the kind of utility I can use in this situation. I'm downloadng now (1.6MB on dial-up ). I'll post back after I get it installed and obtain some info.

Raybro

[raybro]

Nice little utlity, Process Explorer... Thanks again, Stantley. Ran it and found all 7 instances of svchost.exe running have the same path C:widows/system32, so I guess I'm OK in that regard. Having certainty is a GOOD thing...

I'll mark this thread "Solved"

Raybro

[heskum]

detail::netsh is administrator can we use for configure and monitor windows based computer at command propmt and support protocol utility.

WINSOCK: it means WINDOWS SOCKET API ,technically it define how windows network software access
network service especially TCP/IP.



Most of the Internet connectivity problems arise out of corrupt Winsock settings. Windows sockets settings may get corrupted due to the installation of a networking software, or perhaps due to Malware infestation. You will be able connect to the Internet, but the packets won't transfer back and forth. And errors such as Page cannot be displayed may occur when using Internet Explorer. Reset/repair of the Winsock sove problem

[raybro]

Originally Posted by heskum

detail::netsh is administrator can we use for configure and monitor windows based computer at command propmt and support protocol utility.

WINSOCK: it means WINDOWS SOCKET API ,technically it define how windows network software access
network service especially TCP/IP.



Most of the Internet connectivity problems arise out of corrupt Winsock settings. Windows sockets settings may get corrupted due to the installation of a networking software, or perhaps due to Malware infestation. You will be able connect to the Internet, but the packets won't transfer back and forth. And errors such as Page cannot be displayed may occur when using Internet Explorer. Reset/repair of the Winsock sove problem

Thanks for the clarification, heskum. Since I posted I've pretty much solved the oeiginal question. Turne out the intermittant internet activity was related to my dialup service accelerator program. It ceases after a while. Your info is still appreciated. I've copied and pasted it into my maintenance notes for possible future reference.

Raybro