Zone Alarm/ Firewall Question.

Headtime | 22:00 Wed 22nd Jun 2005 | Technology

2 Answers

In Zone Alarm Firewall's program list , I have two programs listed as being aconnected to the internet. They are called "Generic host process for win 32 services".

Does anyone know how I find out what these programs are, and if they are malware of some sort.

Many thanks.

ipod mini downloading music

How do I replace a fan?

Answers

1 to 2 of 2

Best Answer

No best answer has yet been selected by Headtime. Once a best answer has been selected, it will be shown here.

For more on marking an answer as the "Best Answer", please visit our FAQ.

kempie

The GHP for Win32 is related to the DNS service used by Windows to cache DNS results locally and as such is not malware, although you may find you do not need to allow it a connection to the internet. That said, only one instance of this should be running. Check which files both services are pointing to in the Entry Detail in ZoneAlarm. If the second one is rogue it could possibly be *bad*.

A full discussion here

Headtime

Question Author

Cheers Kempie, not sure what GHP stands for, but your answer is very enlightening. Disabling the Generic Host Process entry in Zone Alarm, means no web pages will load.

So I'm presuming it's benign. Still not sure why there are two entries for it.

But thanks for your reply.

1 to 2 of 2

Do you know the answer?