PDA

View Full Version : svchost


Robert
December 17th 03, 10:45 PM
I have recently installed a firewall and a couple of
programs ask me for internet and server access.They are
svchost.exe and alg.exe both are in WINDOWS\System 32
folder.Is there a security problem if I say yes and what
happens if I say no? Anyone Know?

Wesley VogelX
December 17th 03, 10:47 PM
Robert;
At startup, Svchost.exe checks the services portion of the registry to
construct a list of services that it needs to load.may be multiple
instances. You cannot end this process from Task Manager. This is a generic
process, which acts as a host for other processes running from DLLs;
therefore, don't be surprised to see more than one entry for this process.
HAVE TO HAVE RUNNING, YES

Alg.exe. PROGRAM NAME: Application Layer Gateway.DESCRIPTION: Part of
Windows XP that provides support for ICS and Internet Connection Firewall
(ICF). RECOMMENDED ACTION: If a third-party firewall warns you that ALG.exe
wants access, check to make sure you're not double-firewalled. If you are,
disable ICF. If you are using neither ICF nor ICS and are warned that
ALG.exe is trying to access the Net, deny it. A Trojan horse or worm may be
trying to use
it as a backdoor.
Hope this helps. Let us know.
Wes

"Robert" > wrote in message
...
> I have recently installed a firewall and a couple of
> programs ask me for internet and server access.They are
> svchost.exe and alg.exe both are in WINDOWS\System 32
> folder.Is there a security problem if I say yes and what
> happens if I say no? Anyone Know?


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.521 / Virus Database: 319 - Release Date: 9/23/2003

Charles May
December 17th 03, 10:47 PM
Robert,

This link may help, it allows you to see what each svchost.exe process
represents on your system.

http://support.microsoft.com/?kbid=314056


Hope this helps
Charlie


"Wesley VogelX" > wrote in message
news:M5qcb.568294$Ho3.103966@sccrnsc03...
> Robert;
> At startup, Svchost.exe checks the services portion of the registry to
> construct a list of services that it needs to load.may be multiple
> instances. You cannot end this process from Task Manager. This is a
generic
> process, which acts as a host for other processes running from DLLs;
> therefore, don't be surprised to see more than one entry for this process.
> HAVE TO HAVE RUNNING, YES
>
> Alg.exe. PROGRAM NAME: Application Layer Gateway.DESCRIPTION: Part of
> Windows XP that provides support for ICS and Internet Connection Firewall
> (ICF). RECOMMENDED ACTION: If a third-party firewall warns you that
ALG.exe
> wants access, check to make sure you're not double-firewalled. If you are,
> disable ICF. If you are using neither ICF nor ICS and are warned that
> ALG.exe is trying to access the Net, deny it. A Trojan horse or worm may
be
> trying to use
> it as a backdoor.
> Hope this helps. Let us know.
> Wes
>
> "Robert" > wrote in message
> ...
> > I have recently installed a firewall and a couple of
> > programs ask me for internet and server access.They are
> > svchost.exe and alg.exe both are in WINDOWS\System 32
> > folder.Is there a security problem if I say yes and what
> > happens if I say no? Anyone Know?
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.521 / Virus Database: 319 - Release Date: 9/23/2003
>
>

Wesley VogelX
December 17th 03, 10:47 PM
Charles;
Thanks for your reply. Went to the link you provided. After opening
cmd. Type Tasklist /SVC, and then press ENTER. Does not work for me.
This is only for XP Pro. I have XP Home. I am a little disappointed,
as I wanted to see what each process was doing under svchost.exe. I usually
have at least three svchost's running at ant one time.
Wes

"Charles May" > wrote in message
news:oqqcb.567453$YN5.401678@sccrnsc01...
> Robert,
>
> This link may help, it allows you to see what each svchost.exe process
> represents on your system.
>
> http://support.microsoft.com/?kbid=314056
>
>
> Hope this helps
> Charlie
>
>
> "Wesley VogelX" > wrote in message
> news:M5qcb.568294$Ho3.103966@sccrnsc03...
> > Robert;
> > At startup, Svchost.exe checks the services portion of the registry
to
> > construct a list of services that it needs to load.may be multiple
> > instances. You cannot end this process from Task Manager. This is a
> generic
> > process, which acts as a host for other processes running from DLLs;
> > therefore, don't be surprised to see more than one entry for this
process.
> > HAVE TO HAVE RUNNING, YES
> >
> > Alg.exe. PROGRAM NAME: Application Layer Gateway.DESCRIPTION: Part of
> > Windows XP that provides support for ICS and Internet Connection
Firewall
> > (ICF). RECOMMENDED ACTION: If a third-party firewall warns you that
> ALG.exe
> > wants access, check to make sure you're not double-firewalled. If you
are,
> > disable ICF. If you are using neither ICF nor ICS and are warned that
> > ALG.exe is trying to access the Net, deny it. A Trojan horse or worm may
> be
> > trying to use
> > it as a backdoor.
> > Hope this helps. Let us know.
> > Wes
> >
> > "Robert" > wrote in message
> > ...
> > > I have recently installed a firewall and a couple of
> > > programs ask me for internet and server access.They are
> > > svchost.exe and alg.exe both are in WINDOWS\System 32
> > > folder.Is there a security problem if I say yes and what
> > > happens if I say no? Anyone Know?
> >
> >
> > ---
> > Outgoing mail is certified Virus Free.
> > Checked by AVG anti-virus system (http://www.grisoft.com).
> > Version: 6.0.521 / Virus Database: 319 - Release Date: 9/23/2003
> >
> >
>
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.521 / Virus Database: 319 - Release Date: 9/23/2003

Google