|
Posted by Jim on September 29, 2005, 6:53 pm
If you were Registered and logged in, you could reply and use other advanced thread options
om.newsgroup@gmail.com wrote...
> 've made a change on my router.
> And now I'm getting the message from my firewall: "Generic Host Process
> for Win32 Services, Port 32729".
> There's several such messages that come up each with a different port.
>
> Is this an intrusion from a potential hacker?
It sounds like you already have a trojan.
> Should I block it forever?
You should remove the cause, not the symptom.
I don't think you should allow it use the high ports, but you will probably need
to allow Generic Host Process for Win32 Services through for DNS (port53) access
at a minimum.
Could it be automatic updates? What IP is it accessing?
|