Norton Internet Security question

[enigma]

I've been getting a whole bunch of these alerts, and I'm not sure what they're actually reporting:

A remote system is attempting to access Microsoft Generic Host Process for Win32 Services on your computer

Norton is telling me it's low risk, and the default (recommended) action is to permit it. I'm wondering what this is actually reporting, and whether it's safe to check the "always do this" box to let it go.

Every time one of these pops up it dumps me out of whatever program I'm currently running, and sometimes it messes the program up and it needs to be rebooted, so I do need to find some sort of solution.

Any insight, Internet Security Gurus?

 

[dduardo]

From microsoft.public.windowsxp.general

Q: "My Norton Internet Security has been giving me alerts
several times per day that "a remote system is attempting
to access Microsoft Generic Host Process for Win32
Services on (my) computer""

A: "Svchost.exe is a generic host process name for services
that run from dynamic-link libraries, known as DLLs.
This is used for a lot of programs and if you look in your
task manager and see the processes you will notive a few
svchost.exe running. You should allow this although it
could be a virus using it to connect to your computer,
but as long as you have anit-virus software i wouldn'yt
worry."

So basically don't worry about it.

 

[enigma]

Thx, dduardo

 

[gioia]

i have same problem as enigma and trust me dduardo i can't simply "not worry about it"
My internet traffic stops completely and the pop-up in Norton Internet Security 2003 continues to pop-up..concerning the svchost.exe process

Quote:
A remote system is attempting to access Microsoft Generic Host Process for Win32 Services on your computer

No e-mail, no browsing, no nothing...whether I permit or block doesn't make a difference...only way is to right click on NIS icon in taskbar and click disable...then internet traffic resumes...any ideas

 

[dduardo]

I would remove the Norton's firewall and install another one like zone alarm

http://download.zonelabs.com/bin/free/1012_zl/zlsSetup_45_594_000.exe

I would also use Mozilla Firebird instead of Internet Explorer.

http://www.mozilla.org/products/firefox/

That should be enough protection

 

[delreybird]

I get the same messages. When I check the location of the sites that are attempting to contact my computer, they always end up being in China. This concerns me. Why would some site/server/whatever in China be trying to access my PC? For what end?