1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

svchost connecting to the internet

Discussion in 'Virus & Other Malware Removal' started by ukboy, Jan 29, 2003.

Thread Status:
Not open for further replies.
Advertisement
  1. ukboy

    ukboy Thread Starter

    Joined:
    Nov 22, 2002
    Messages:
    193
    for me to be able to surf the net i have to allow svchost.exe access to the internet through zone alarm, the file sits in windows/system32 folder, msn messenger works without the connection but not iexplorer v6.0, is this normal and does anyone else have to give this program access to the internet to use ie, i run windows xp
     
  2. Firejay

    Firejay

    Joined:
    Apr 26, 2002
    Messages:
    2,538
  3. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    56,236
    First Name:
    Derek
    Yes you do have to allow it access to the internet.

    svchost is the basic service that Xp uses to control most aspects of XP.

    without it XP doesn't run and blocking it blocks essential inrernet services, like tcp/ip ip look up numbers and all the other internat access methods.

    the problem with ZA as a firewall is it isn't sophisticated enough to allow some parts of svchost to access the internet and block others that you might not need.

    You can get a much better firewall than ZA and configure it to only allow the services you want to work.
     
  4. ukboy

    ukboy Thread Starter

    Joined:
    Nov 22, 2002
    Messages:
    193
    thanks for your help
     
  5. ITarch

    ITarch

    Joined:
    Feb 3, 2003
    Messages:
    2
    I have seen on some message boards and @ MS wherein they discuss the application tlist.exe (in the Supporttools CAB)that details the children of each svchost.exe instance...I can't find it on the win2k cd however, and tlist from older versions doesn't work.

    any thoughts?
     
  6. mViOkPe

    mViOkPe

    Joined:
    Oct 15, 2002
    Messages:
    101
    You shouldn't need to give 'server' rights to it. In a rules based FW this would be handled by rules for localhost(loopback). IOW it should not need to connect outside the sys or LAN.

    BTW The same is true for other NTkernnal processes too. (with certain exceptions such as; DCOM which most folks have no use for anyway)
     
  7. ITarch

    ITarch

    Joined:
    Feb 3, 2003
    Messages:
    2
    I think the last poster,mViOkPe, misunderstood me. I am referring to a program supplied by MS (tlist.exe-) that allows admins to review the actuall dll processes/services grouped under each instance of svchost.exe.

    we are seeing a particular machine spuriously access the internet, and we are worried about some devious "infection". we want to troubleshoot the child processes, to see what is what.

    the user says at some point, he received messages about win2kpro OS files being overwritten, while accessing the internet...

    thanks in advance
     
  8. mViOkPe

    mViOkPe

    Joined:
    Oct 15, 2002
    Messages:
    101
    Sorry ITarch, but I wasn't replying to you. I was peplying to the original poster. I didn't realize that this was an older thread revisited.
     
  9. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/115948

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice