Results 1 to 6 of 6

Thread: Generic Host Process (svchost.exe) and UpdClient.exe

  1. #1
    myschrec Guest

    Default Generic Host Process (svchost.exe) and UpdClient.exe

    I upgraded to 8.0.298 a few days ago, and now I get a HIGH security alert whenever I start up or restart windows.
    It states:
    "Generic Host Process for Win32 Services is trying to communicate with C:\Windows\system32\ZoneLabs\UpdClient.exe by opening its process."
    It refers to "Applicaton: svchost.exe."

    I have been clicking both "ALLOW" and the box for "Apply this setting to all suspicious behaviors exhibited by this application."

    ZoneAlarm does not remember my setting because the HIGH ALERT still comes up when I start up windows.

    I JUST WANT IT TO REMEMBER MY SETTING. HOW DO I GET IT TO DO THAT?

    I checked the PROGRAMS Section and I have trusted and internet ACCESS for Generic Host Process for win32 Services (svchost.exe) as well as Trusted Server rights, but not internet server rights.

    What is going on? What should I do? Is there a fix?

    Operating System:Windows XP Pro
    Software Version:8.0
    Product Name:ZoneAlarm Internet Security Suite

  2. #2
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Generic Host Process (svchost.exe) and UpdClient.exe

    Hi!when ZA does not remember the settings then most likely your ZA settings are corrupted.Reset them.... this way:1.) Hold down the Ctrl and Shift keys together
    2.) Right click on the ZA icon near your clock
    3.) Choose 'Reset' from the box that comes up
    4.) Choose Yes on the Reset Settings dialog box
    5.) When prompted, choose OK to restart your system
    6.) Follow the on screen configuration prompts after rebootCheers,Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  3. #3
    myschrec Guest

    Default Re: Generic Host Process (svchost.exe) and UpdClient.exe

    THANKS FAX

    I will try your RESET solution after I finish updating a (different) program; one that requires another 23 minutes of downloading.

    Could you tell me if this resolution is something you would also recommend for the other problem that I posted recently? It is found at http://forum.zonealarm.com/zonelabs/...ssage.id=32270. Basically, KASPERSKY anti-virus is requesting access when I run the SCAN -- and ZASS is failing to "remember" that I have been giving Kaspersky (ScanningProcess.exe) permission. You should note that another Forum member is having the same problem.

    Any help you can give me would be greatly appreciated. Thanks

  4. #4
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Generic Host Process (svchost.exe) and UpdClient.exe

    Hi!yes, also.. and you may need to in-depth clean your system if the reset fails.There may be issue of conflicts with other security tools or malware infections.-------------------------------------------First Remove ZA from add/remove programs then:01.) Restart your computer
    02.) When you see the screen go black and it starts booting back up keep
    tapping the "F8" key (at the top of your keyboard)
    03.) This should bring up a menu. Choose Safe Mode off the menu by
    using the arrow keys on the keyboard to highlight Safe Mode and press
    Enter
    04.) If you get a message asking to go to Safe Mode, choose Yes. If you
    get a help and support window, close this.
    05.) Once you are at the desktop, Click Start, My Computer
    06.) Click Tools, Folder Options, View Tab
    07.) Place a dot next to "Show Hidden Files and Folders"
    08.) Remove the check from "Hide Protected Operating System Files
    (Recommended)"
    09.) Choose Yes to the warning
    10.) Click OK
    11.) Double click C:

    Note: In the future steps if you do not see any files or folders, please click
    the "Show Files" link to view them.

    12.) Double Click the Program Files Folder
    13.) Right Click the Zone Labs Folder, click Delete, and choose Yes

    NOTE: If you cannot delete the entire folder, please open the Zone Labs -
    > ZoneAlarm folder and delete out as many of the files listed here as
    possible.

    14.) Close this window
    15.) Click Start, My Computer
    16.) Double Click the C:
    17.) Double Click the Windows Folder (It may also be WinNT)
    18.) Right Click the Internet Logs Folder, click Delete, and choose Yes
    19.) Double Click the System32 Folder
    20.) Right Click the Zone Labs Folder, click Delete, and choose Yes

    NOTE: If you cannot delete the entire folder, please open the Zone Labs
    folder and delete out as many of the files listed here as possible.

    21.) Locate and delete the following files in the System32 folder if they are
    present:

    - vsconfig.xml
    - vsxml.dll
    - vsregexp.dll
    - vsdata.dll
    - vsdata95.vxd
    - vsdatant.sys
    - vsmonapi.dll
    - vspubapi.dll
    - vsinit.dll
    - vsutil.dll
    - vswmi.dll
    - zlcommdb.dll
    - zlcomm.dll
    - z llictbl.dat
    - zpeng24.dll

    22.) Clear your Temp Directory per the instructions below.

    - Go to Start -> Run
    - Type %temp% and click OK
    - Select all of these files and delete them

    23.) Clear the Prefetch folder per the instructions below.

    - Go to Start -> Run
    - Type Prefetch and click OK
    - Select all of these files and delete them

    24.) Remove the following registry entries by going to Start -> Run and
    typing in regedit. Use the folders on the left side of the window to navigate
    to the specified directories.

    HKEY_LOCAL_MACHINE\Software\Zone Labs
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\vsmon
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\vsdatant

    *Important Advisory: Deleting registry entries incorrectly may cause
    serious problems to your operating system, which may necessitate the
    need to reinstall it. Please make sure you are able to perform these
    deletions correctly before you decide to edit the entries. If you are not
    sure, you should seek help from someone who is familiar with editing the
    registry.

    For information about how to edit the registry in Windows, from your
    desktop, click Start >> Run >> and type regedit. Click on Help >> Help
    Topics. Under the Contents tab, click Change Keys and Values (this may
    be found under the How to... section).

    Also, you should always make a backup of the registry before editing it.
    You can find this in the same section of the Help files.

    25.) Close this window, then empty your recycle bin.
    26.) Restart the computer.
    27.) Check the system for malware. Check with MBAM and SuperAntispyware. See links here:http://forum.zonelabs.org/zonelabs/b...essage.id=378728.) ZA does not play nice with many other security tools. They may block its correct functioning including updates. For example, spyware doctor, spysweeper, trojan hunter, win patrol, PCtools Threat Fire, Mcafee, Norton, Symantec, Adaware, SpybotS&D, WinPatrol, AVG, NOD, Kaspersky and manyothers. If you want to troubleshoot issues with ZA please remove these tools (not enough to disable) and install back (if you really need) only after you see your ZASS is working as it should.29. Clean your system and registry with ccleaner.comhttp://www.ccleaner.com/download/builds/downloadbinslim30. Re-download the ZA installerwww.zonealarm.com/zasuitedownload/ 31. Install with default settings do NOT alter them. After re-boot go to ZA antivirus/antispyware and 'Update Now' and do not restore any previous ZA settings.Cheers,Fax. See below.

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

  5. #5
    myschrec Guest

    Default Re: Generic Host Process (svchost.exe) and UpdClient.exe

    Thanks Fax. It appears that your first suggestion -- Resetting ZASS -- has solved the Generic Host Process problem.

    However, the RESET solution did not resolve the Kaspersky AV Scanning problem that I wrote about in the other part of the forum -- at http://forum.zonealarm.com/zonelabs/...ssage.id=32270.

    I will now attempt your (very exhaustive and time consuming) second suggestion that I remove all of ZASS, remove registry entires, prefetch files, temp directory files, and recycle bin files, run anti-spyware and ccleaner, and reinstall 8.0.298 with clean default settings. [I do not use any security tools other than ZASS, so I believe there is no conflict in that area.] I suspect that a clean WIPE and a CLEAN RE-INSTALL might solve my Kaspersky problem.

    On the other hand, because another person has reply to my Kaspersky posting in the other part of the forum, perhaps you should consider two things: (1) posting a reply to my message at http://forum.zonealarm.com/zonelabs/...ssage.id=32270, telling the other person your suggested resolution; and (2) consider whether the Kaspersky problem is not a problem with my particular machine or installation and perhaps a problem with 8.0.298.

    I will report to you if a clean WIPE and RE-INSTALL solves my problem. But I need to work on my projects before I can take the time to do that. So I might not get back to you until tomorrow.

    WISH ME LUCK!!

  6. #6
    Join Date
    Nov 2004
    Location
    localhost
    Posts
    17,290

    Default Re: Generic Host Process (svchost.exe) and UpdClient.exe


    <BLOCKQUOTE><HR>myschrec wrote:
    However, the RESET solution did not resolve the Kaspersky AV Scanning problem that I wrote about in the other part of the forum -- at http://forum.zonealarm.com/zonelabs/...ssage.id=32270.
    <HR></BLOCKQUOTE>Strange, it should have worked. May be you have files corrupted that cannot be removed or folder/registry permission that prevented the reset.Also do not restore previous ZA settings, they may be corrupted.Good luck, just follow all the steps. Its very easy.Cheers,Fax

    Click here for ZA Support
    Monday-Saturday 6am to 10pm Central time
    Closed Sundays and Holidays

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •