Forum Home
Press F1
 
Thread ID: 47818 2004-08-06 12:12:00 Should I allow this program in ?(Firewalled) BobM (1138) Press F1
Post ID Timestamp Content User
258889 2004-08-06 12:12:00 Should I allow this in to my computer ?
Generic host process for win 32 service(sychost) is being contacted from remote machine (222.152.167.151). Location Service. Dynamically assign ports for rpc. Do you want to allow this program to access your network
BobM (1138)
258890 2004-08-06 13:33:00 Put *sychost* into Google.
Read the first entry & follow the information...specially the tasklist checkup.
Post back here with anything you don't understand...and don't do anything drastic until you do.
Laura (43)
258891 2004-08-06 13:36:00 No way. It is basically asking permission to access your computer as though it was their own. Normally used (rpc = Remote Procedure Call) for someone to remotely look at your computer, a bit like a remote Tech call.
That IP is actually allocated to telecom/xtra customers, so either an attempt to access your PC or someone is doing an RPC but has the wrong IP (yours) address.
Pheonix (280)
258892 2004-08-06 13:38:00 Or that virus :D Pheonix (280)
258893 2004-08-06 13:42:00 I don't know what programs you have running but I would say no. I don't let anything form outside connect but I don't use Kaaza or anything like that. mikebartnz (21)
258894 2004-08-06 13:54:00 Nice one, guys. That's what I like about PF1.
Nobody had answered this poor guy for more than an hour & all I had time for was a very quick Google from a newbie..
Now others have filled the gap more knowledgeably.
Laura (43)
258895 2004-08-06 13:58:00 sychost or svchost? kiki (762)
258896 2004-08-06 16:14:00 What firewall are you using? If ZoneAlarm, there is an option to go to their website for more information on the specific issue. I don't remember exactly but I think you click, or right click on the information supplied about the intruder. Vince (406)
258897 2004-08-07 00:27:00 as kiki as already said check the name. svchost is windows service, anything close to it (eg sychost, scvhost) is likly to be a virus.

with svchost you need it to connect to the net (otherwise you will get no net connection at all) but it dosn't need to accept connections from the need so block those.
tweak'e (174)
258898 2004-08-07 00:45:00 > with svchost you need it to connect to the net (otherwise you will get no net connection at all)

I have svchost.exe blocked from accessing the internet and I get an internet connection.

It does prevent me getting Windows update notifications though, and whatever else MS try to get onto this machine.
Susan B (19)
1 2