Results 1 to 2 of 2

Thread: As previous posts have stated, svchost.exe acting as a server (0.0.0.0:135)

  1. #1
    riceorony Guest

    Default As previous posts have stated, svchost.exe acting as a server (0.0.0.0:135)

    Hello all!

    I've read all other posts on this and just wanted to ask this:

    I just reformatted a used computer that I purchased ($80 hard to beat!) and installed ZA-ISS 7.0 for XP SP3.

    Upon boot-up I too get the prompt that svchost is trying to act as a server (the prompt box is not green, nor yellow, nor red... it's like a stale blue?)

    I was clicking "deny" for about a week and got tired of it so I clicked "always allow" I did this because I remember in the past I would totally be unable to connect to wireless networks if I selected "always deny" for this prompt.

    Will this be a problem? (e.g. any additonal vulnerabilities if I went to make sure Internet Server access under Program Control has a big red X?)

    Here is a darling picture for my best friend Oldsod



    Here is one about how malware feels about ZA's Forcefield haha



    Message Edited by riceorony on 09-30-2008 10:38 PM

  2. #2
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: As previous posts have stated, svchost.exe acting as a server (0.0.0.0:135)

    riceorony wrote:
    Hello all!
    I've read all other posts on this and just wanted to ask this:
    I just reformatted a used computer that I purchased ($80 hard to beat!) and installed ZA-ISS 7.0 for XP SP3.
    Upon boot-up I too get the prompt that svchost is trying to act as a server (the prompt box is not green, nor yellow, nor red... it's like a stale blue?)
    I was clicking "deny" for about a week and got tired of it so I clicked "always allow" I did this because I remember in the past I would totally be unable to connect to wireless networks if I selected "always deny" for this prompt.
    Will this be a problem? (e.g. any additonal vulnerabilities if I went to make sure Internet Server access under Program Control has a big red X?)
    <hr noshade style="width: 700px; color: yellow; height: 10px; text-align: center; border: 2px solid blue;">

    AWWWHH

    a

    for under a





    You tried to do a ...



    or just read this:

    In general....
    svchost.exe will connect in and out of the 127.0.0.1 (loopback address) and the 0.0.0.0 (non-route or zero octet address) by TCP (and UDP), connect to the remote port 67 of the DHCP server and accept connections from the dhcp server's port 67 to the computer's own port 68, connect to the remote port 53 of the DNS server and accept connections from that DNS server's port 53, connect to the remote port 123 of the time server and accept incoming connections from that port.
    Svchost.exe can be seen in many outgoing connections in windows going to the remote ports 80 (HTTP), 443 (HTTPS) and other things such as RTSP, POP3, etc.
    Also used in the tracert, ping, nslookups, etc.
    But not limited to just these, as these are some of the generally seen items for the average home user.
    Usually the other window processes such as winlogon.exe, userinit.exe, csrss.exe, services.exe, explorer.exe, rundll32.exe and a few others are associated with these svchost.exe connections too.

    To my friend riceorony...



    Oldsod.
    Best regards.
    oldsod

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •