Zone Alarm popup

  • Thread starter Thread starter Ken Walsh
  • Start date Start date
Re: Zone Alarm popup

On Fri, 17 Oct 2008 00:01:19 -0300, John John (MVP) wrote:

> Kayman wrote:
>
>> On Thu, 16 Oct 2008 09:52:28 -0300, John John (MVP) wrote:
>>
>>
>>>Kayman wrote:
>>>
>>>>On Thu, 16 Oct 2008 06:46:14 -0500, HeyBub wrote:
>>>>
>>>>
>>>>
>>>>>Kayman wrote:
>>>>>
>>>>>
>>>>>>On Wed, 15 Oct 2008 13:33:31 -0500, TMitchell wrote:
>>>>>>
>>>>>>
>>>>>>
>>>>>>>>Identification: None
>>>>>>>>Application: sychost.exe
>>>>>>>>Source IP: 0.0.0.0.Port 135
>>>>>>>>
>>>>>>>
>>>>>>>Can't help, but I'm having the exact same problem these past few
>>>>>>>weeks. Don't know why it started or how to solve it.
>>>>>>
>>>>>>1.Uninstall/Remove ZA from your OS and DON'T re-install!
>>>>>>http://zonealarm.donhoover.net/uninstall.html
>>>>>>--or--
>>>>>>Revo Uninstaller
>>>>>>http://www.revouninstaller.com/
>>>>>>
>>>>>
>>>>>[...]
>>>>>
>>>>>The OP has a Trojan and you're telling him to remove the software that
>>>>>detected it?
>>>>
>>>>
>>>>According to the hype, ZA is supposed to prevent the installation of
>>>>malware. The OP's OS is compromised. Implementing my suggestions will
>>>>remove this Trojan and keep malware out of his OS.
>>>
>>>I'm no fan of ZA but I have never heard that its basic firewall is
>>>supposed to prevent the installation of malware. Where have you seen ZA
>>>advertise or state that its basic firewall prevents the installation of
>>>malware?

>>
>>
>> In my newsreader the posts authored by KW and TM do not indicate specifics
>> of ZA.
>> The hype created by ZA is real ("Blocks malicious program attacks including
>> rootkits"), just Google it.

>
> It wouldn't be surprising that you would find that in your Google
> search, if you don't already know it Zone Alarm is also in the
> Anti-Virus/Anti-spyware market so it wouldn't be out of the ordinary for
> anyone in that market to have products capable of blocking those pests
> and to advertise it, it is no more of a hype than what the other
> competing companies in that market also claim and advertise about their
> products.


It wouldn't be surprising that a certain John John (MVP) didn't find in his
search the ZA firewall which "blocks malicious malware attacks". LOL!
To reiterate, I do call their claim to be nothing but a sensational
promotion because it (obviously) ain't working!

> The OP talks about firewall outbound connection attempts,


The OP talks about a malware infection! "sychost.exe is a malicious process
related to LEOX.B virus. It is a dangerous threat to your system and
therefore should be removed immediately".

> you have no way of knowing if he is using the free basic firewall or the
> pay for security suite,


I know that according to his post, his OS is compromised by malware and
he's using a snake oil application for whatever security purpose.
Nobody except you is referring to suites. Nice try to redirect content
of a posting! What's next? More innuendo and selective snipping of posts to
suit your meaningless (scoring or whatever) purpose?
Save your efforts - EOD :-)

> therefore you have no way of knowing if his ZA
> product should have prevented the installation of malware.


Irrelevant! Remedy is what's needed. Read my previous post in its entirety
and learn to comprehend.
BTW, what is your recommendation to tackle sychost.exe; WLOC?
 
Re: Zone Alarm popup

Kayman wrote:

> On Fri, 17 Oct 2008 00:01:19 -0300, John John (MVP) wrote:
>
>
>>Kayman wrote:
>>
>>
>>>On Thu, 16 Oct 2008 09:52:28 -0300, John John (MVP) wrote:
>>>
>>>
>>>
>>>>Kayman wrote:
>>>>
>>>>
>>>>>On Thu, 16 Oct 2008 06:46:14 -0500, HeyBub wrote:
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>Kayman wrote:
>>>>>>
>>>>>>
>>>>>>
>>>>>>>On Wed, 15 Oct 2008 13:33:31 -0500, TMitchell wrote:
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>>>Identification: None
>>>>>>>>>Application: sychost.exe
>>>>>>>>>Source IP: 0.0.0.0.Port 135
>>>>>>>>>
>>>>>>>>
>>>>>>>>Can't help, but I'm having the exact same problem these past few
>>>>>>>>weeks. Don't know why it started or how to solve it.
>>>>>>>
>>>>>>>1.Uninstall/Remove ZA from your OS and DON'T re-install!
>>>>>>>http://zonealarm.donhoover.net/uninstall.html
>>>>>>>--or--
>>>>>>>Revo Uninstaller
>>>>>>>http://www.revouninstaller.com/
>>>>>>>
>>>>>>
>>>>>>[...]
>>>>>>
>>>>>>The OP has a Trojan and you're telling him to remove the software that
>>>>>>detected it?
>>>>>
>>>>>
>>>>>According to the hype, ZA is supposed to prevent the installation of
>>>>>malware. The OP's OS is compromised. Implementing my suggestions will
>>>>>remove this Trojan and keep malware out of his OS.
>>>>
>>>>I'm no fan of ZA but I have never heard that its basic firewall is
>>>>supposed to prevent the installation of malware. Where have you seen ZA
>>>>advertise or state that its basic firewall prevents the installation of
>>>>malware?
>>>
>>>
>>>In my newsreader the posts authored by KW and TM do not indicate specifics
>>>of ZA.
>>>The hype created by ZA is real ("Blocks malicious program attacks including
>>>rootkits"), just Google it.

>>
>>It wouldn't be surprising that you would find that in your Google
>>search, if you don't already know it Zone Alarm is also in the
>>Anti-Virus/Anti-spyware market so it wouldn't be out of the ordinary for
>>anyone in that market to have products capable of blocking those pests
>>and to advertise it, it is no more of a hype than what the other
>>competing companies in that market also claim and advertise about their
>>products.

>
>
> It wouldn't be surprising that a certain John John (MVP) didn't find in his
> search the ZA firewall which "blocks malicious malware attacks". LOL!
> To reiterate, I do call their claim to be nothing but a sensational
> promotion because it (obviously) ain't working!


Now you are trying to change your previous statement which was:

"According to the hype, ZA is supposed to prevent the installation of
malware."

It doesn't suprise me that you would now try to change the the
discussion to weasle out of your previous incorect statement.

John
 
Re: Zone Alarm popup

Kayman wrote:

> On Fri, 17 Oct 2008 00:01:19 -0300, John John (MVP) wrote:
>
>
>>Kayman wrote:
>>
>>
>>>On Thu, 16 Oct 2008 09:52:28 -0300, John John (MVP) wrote:
>>>
>>>
>>>
>>>>Kayman wrote:
>>>>
>>>>
>>>>>On Thu, 16 Oct 2008 06:46:14 -0500, HeyBub wrote:
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>Kayman wrote:
>>>>>>
>>>>>>
>>>>>>
>>>>>>>On Wed, 15 Oct 2008 13:33:31 -0500, TMitchell wrote:
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>>>Identification: None
>>>>>>>>>Application: sychost.exe
>>>>>>>>>Source IP: 0.0.0.0.Port 135
>>>>>>>>>
>>>>>>>>
>>>>>>>>Can't help, but I'm having the exact same problem these past few
>>>>>>>>weeks. Don't know why it started or how to solve it.
>>>>>>>
>>>>>>>1.Uninstall/Remove ZA from your OS and DON'T re-install!
>>>>>>>http://zonealarm.donhoover.net/uninstall.html
>>>>>>>--or--
>>>>>>>Revo Uninstaller
>>>>>>>http://www.revouninstaller.com/
>>>>>>>
>>>>>>
>>>>>>[...]
>>>>>>
>>>>>>The OP has a Trojan and you're telling him to remove the software that
>>>>>>detected it?
>>>>>
>>>>>
>>>>>According to the hype, ZA is supposed to prevent the installation of
>>>>>malware. The OP's OS is compromised. Implementing my suggestions will
>>>>>remove this Trojan and keep malware out of his OS.
>>>>
>>>>I'm no fan of ZA but I have never heard that its basic firewall is
>>>>supposed to prevent the installation of malware. Where have you seen ZA
>>>>advertise or state that its basic firewall prevents the installation of
>>>>malware?
>>>
>>>
>>>In my newsreader the posts authored by KW and TM do not indicate specifics
>>>of ZA.
>>>The hype created by ZA is real ("Blocks malicious program attacks including
>>>rootkits"), just Google it.

>>
>>It wouldn't be surprising that you would find that in your Google
>>search, if you don't already know it Zone Alarm is also in the
>>Anti-Virus/Anti-spyware market so it wouldn't be out of the ordinary for
>>anyone in that market to have products capable of blocking those pests
>>and to advertise it, it is no more of a hype than what the other
>>competing companies in that market also claim and advertise about their
>>products.

>
>
> It wouldn't be surprising that a certain John John (MVP) didn't find in his
> search the ZA firewall which "blocks malicious malware attacks". LOL!
> To reiterate, I do call their claim to be nothing but a sensational
> promotion because it (obviously) ain't working!



Now you are trying to change your previous statement which was:

"According to the hype, ZA is supposed to prevent the installation of
malware."

It doesn't suprise me that you would now try to change the the
discussion to weasle out of your previous incorect statement.

John
 
Re: Zone Alarm popup

Kayman wrote:
> On Thu, 16 Oct 2008 20:31:30 -0500, TMitchell wrote:
>
>> Patrick Keenan wrote:
>>> "Ken Walsh" <ken@nospam.co.uk> wrote in message
>>> news:nOOdnctNLYLjN2jVnZ2dnUVZ8sCdnZ2d@posted.plusnet...
>>>> "Wilderbeast" <Wilderbeast@unlisted.com> wrote in message
>>>> news:D6mdncbR0rk6BGjVnZ2dnUVZ_g2dnZ2d@comcast.com...
>>>>>
>>>>> Ken Walsh wrote:
>>>>>> Hi,
>>>>>>
>>>>>> I wonder if someone can help me. When I start my machine up I get a
>>>>>> `Zone alarm pop up security alert` Server Program saying
>>>>>> Generic Host Process for Win32 Servers is trying to act as a server
>>>>>>
>>>>>> Identification: None
>>>>>> Application: sychost.exe
>>>>>> Source IP: 0.0.0.0.Port 135
>>>>>>
>>>>>> if I do either, click on the button `remember this setting.`Allow` or
>>>>>> `Deny` Zone Alarm then starts up and my machine works OK.
>>>>>> The trouble is it will still pop up next time I boot up so its
>>>>>> getting to be a pain. Any ideas how to stop this popping up every
>>>>>> time.
>>>>>>
>>>>>> Thanks
>>>>>>
>>>>>> Ken
>>>>> sychost.exe is a malicious process related to LEOX.B virus. It is a
>>>>> dangerous threat to your system and therefore should be removed
>>>>> immediately after detection.
>>>>>
>>>>> http://www.2-spyware.com/remove-sychost-exe.html
>>>>>
>>>>> http://www.google.com/search?hl=en&q=sychost.exe&btnG=Google+Search&aq=f&oq=
>>>>>
>>>>>
>>>>>
>>>> I`m reading on sites that svchost.exe is a legit windows file that is
>>>> run by the system???
>>> As pointed out, look very carefully at the name of the process. It's
>>> got a Y, not a V, in it. This is a fairly common trick used by malware
>>> authors, to make you think that the process is legitimate.
>>>
>>> You need to check that this isn't a typo.
>>>
>>> HTH
>>> -pk

>> I can't answer for the OP, but my AZ popup states it's "svchost.exe",
>> not the malware version "sychost.exe", so I suppose that is what the OP
>> meant to state too.
>>
>> So, that leaves us with the original question that remains unanswered
>> (except for the somewhat unhelpful "...remove ZoneAlarm and stick with
>> Windows firewall...". which, while I appreciate and respect the intent
>> of, is not what the OP and I are asking about as a possible solution for
>> the stated problem).

>
> Then you haven't read my post in its entirety!


OK. I read it all, but am confused as to what all of those steps are
supposed to accomplish. Looks to me that they are predicated on the
assumption that I want to remove ZA from my system (I don't) and that I
have the malware version of the svchost.exe file (or some other malware
file that needs to be removed), and I don't.

It's entirely possible that I am not understanding what you posted, but
if it was a solution to the OP's (and my) ZA popup problem (to be clear;
ZA not remembering that I selected it to rember to allow the Generic
Host Process for the svchost.exe file to access the internet) and not
involving removal of the ZA program or some malware file that I don't
have, then it's still not the solution I'm looking for.
 
Re: Zone Alarm popup



Kayman wrote:

> On Fri, 17 Oct 2008 00:01:19 -0300, John John (MVP) wrote:
>
>
>>Kayman wrote:
>>
>>
>>>On Thu, 16 Oct 2008 09:52:28 -0300, John John (MVP) wrote:
>>>
>>>
>>>
>>>>Kayman wrote:
>>>>
>>>>
>>>>>On Thu, 16 Oct 2008 06:46:14 -0500, HeyBub wrote:
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>Kayman wrote:
>>>>>>
>>>>>>
>>>>>>
>>>>>>>On Wed, 15 Oct 2008 13:33:31 -0500, TMitchell wrote:
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>>>Identification: None
>>>>>>>>>Application: sychost.exe
>>>>>>>>>Source IP: 0.0.0.0.Port 135
>>>>>>>>>
>>>>>>>>
>>>>>>>>Can't help, but I'm having the exact same problem these past few
>>>>>>>>weeks. Don't know why it started or how to solve it.
>>>>>>>
>>>>>>>1.Uninstall/Remove ZA from your OS and DON'T re-install!
>>>>>>>http://zonealarm.donhoover.net/uninstall.html
>>>>>>>--or--
>>>>>>>Revo Uninstaller
>>>>>>>http://www.revouninstaller.com/
>>>>>>>
>>>>>>
>>>>>>[...]
>>>>>>
>>>>>>The OP has a Trojan and you're telling him to remove the software that
>>>>>>detected it?
>>>>>
>>>>>
>>>>>According to the hype, ZA is supposed to prevent the installation of
>>>>>malware. The OP's OS is compromised. Implementing my suggestions will
>>>>>remove this Trojan and keep malware out of his OS.
>>>>
>>>>I'm no fan of ZA but I have never heard that its basic firewall is
>>>>supposed to prevent the installation of malware. Where have you seen ZA
>>>>advertise or state that its basic firewall prevents the installation of
>>>>malware?
>>>
>>>
>>>In my newsreader the posts authored by KW and TM do not indicate specifics
>>>of ZA.
>>>The hype created by ZA is real ("Blocks malicious program attacks including
>>>rootkits"), just Google it.

>>
>>It wouldn't be surprising that you would find that in your Google
>>search, if you don't already know it Zone Alarm is also in the
>>Anti-Virus/Anti-spyware market so it wouldn't be out of the ordinary for
>>anyone in that market to have products capable of blocking those pests
>>and to advertise it, it is no more of a hype than what the other
>>competing companies in that market also claim and advertise about their
>>products.

>
>
> It wouldn't be surprising that a certain John John (MVP) didn't find in his
> search the ZA firewall which "blocks malicious malware attacks". LOL!
> To reiterate, I do call their claim to be nothing but a sensational
> promotion because it (obviously) ain't working!


Now you are trying to change your previous statement which was:

"According to the hype, ZA is supposed to prevent the installation of
malware."

It doesn't suprise me that you would now try to change the the
discussion to weasle out of your previous incorect statement.

John
 
Re: Zone Alarm popup








"Kayman" <kaymanDeleteThis@operamail.com> wrote in message
news:%23qGLGzEMJHA.1156@TK2MSFTNGP04.phx.gbl...
> On Wed, 15 Oct 2008 07:04:40 +0100, Ken Walsh wrote:
>
>> Hi,
>>
>> I wonder if someone can help me. When I start my machine up I get a `Zone
>> alarm pop up security alert` Server Program saying
>> Generic Host Process for Win32 Servers is trying to act as a server
>>
>> Identification: None
>> Application: sychost.exe
>> Source IP: 0.0.0.0.Port 135
>>
>> if I do either, click on the button `remember this setting.`Allow` or
>> `Deny`
>> Zone Alarm then starts up and my machine works OK.
>> The trouble is it will still pop up next time I boot up so its getting to
>> be
>> a pain. Any ideas how to stop this popping up every time.

>
> Ken Walsh <ken@nospam.co.uk> wrote on 16-Oct-08 6:46:38 PM in
> comp.security.firewalls
>
>
> Sorry my mistake I went and checked again after reading the replies and
> like an idiot I am (blind as a bat as well)
> yes your right it is SVCHOST.EXE and not sychost.exe
> [unquote]
>
> It would've been be nice if you'd advised this group here as well!
yes your right but I was only on line for seconds when I sent the post back
to that group not had chance
to do the same to this one (sorry) but your quite right it was a **** up by
me. Sorry my mistake I went
and checked again after reading the replies and like an idiot I am (blind as
a bat as well ;-)
yes your right it is SVCHOST.EXE and not sychost.exe

but the same question is, valid why do I keep getting it??
 
Re: Zone Alarm popup

On Mon, 20 Oct 2008 18:08:08 +0100, Ken Walsh wrote:

> "Kayman" <kaymanDeleteThis@operamail.com> wrote in message
> news:%23qGLGzEMJHA.1156@TK2MSFTNGP04.phx.gbl...
>> On Wed, 15 Oct 2008 07:04:40 +0100, Ken Walsh wrote:
>>
>>> Hi,
>>>
>>> I wonder if someone can help me. When I start my machine up I get a `Zone
>>> alarm pop up security alert` Server Program saying
>>> Generic Host Process for Win32 Servers is trying to act as a server
>>>
>>> Identification: None
>>> Application: sychost.exe
>>> Source IP: 0.0.0.0.Port 135
>>>
>>> if I do either, click on the button `remember this setting.`Allow` or
>>> `Deny`
>>> Zone Alarm then starts up and my machine works OK.
>>> The trouble is it will still pop up next time I boot up so its getting to
>>> be
>>> a pain. Any ideas how to stop this popping up every time.

>>
>> Ken Walsh <ken@nospam.co.uk> wrote on 16-Oct-08 6:46:38 PM in
>> comp.security.firewalls
>>
>>
>> Sorry my mistake I went and checked again after reading the replies and
>> like an idiot I am (blind as a bat as well)
>> yes your right it is SVCHOST.EXE and not sychost.exe
>> [unquote]
>>
>> It would've been be nice if you'd advised this group here as well!
>
> yes your right but I was only on line for seconds when I sent the post back
> to that group not had chance
> to do the same to this one (sorry) but your quite right it was a **** up by
> me. Sorry my mistake I went
> and checked again after reading the replies and like an idiot I am (blind as
> a bat as well ;-)
> yes your right it is SVCHOST.EXE and not sychost.exe
>
> but the same question is, valid why do I keep getting it??
Read through here:
http://support.microsoft.com/kb/314056
http://www.howtogeek.com/howto/windows-vista/what-is-svchostexe-and-why-is-it-running/
http://www.liutilities.com/products/wintaskspro/processlibrary/svchost/
http://www.download.com/8301-2007_4-9865052-12.html
Download Process Explorer:
http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

In any case, you won't harm your operating system if go thru steps as
suggested in my response to TMitchel
Re: Zone Alarm popup Kayman <kaymanDeleteThis@operamail.com> 16-Oct-08
7:43:22 AM

Good luck :)
 
Back
Top