|
Posted by Steven L Umbach on January 3, 2006, 1:17 am
If you were Registered and logged in, you could reply and use other advanced thread options
As long as the winlogon is referring to the winlogon.exe in the
\windows\system32 folder then that is normal operating system activity. See
the link below for more information. You can use msinfo32 [enter into run
box] and then go to software environment/running tasks to see the path to
the executable for the process. Also make sure you do regular [weekly or
more if you suspect malicious activity] scans for viruses and spyware. ---
Steve
http://www.neuber.com/taskmanager/process/winlogon.exe.html
http://www.microsoft.com/athome/security/protect/windowsxpsp2/Default.mspx
--- Protect Your PC must do basics.
> Is this warning below normal or a software intrusion?
>
> ZoneAlarm Security Alert
> ADVANCED PROGRAM
> Windows NT Logon Application is trying to use
> Generic Host Process for Win32 services to act as a server.
> Application: winlogon.exe
> Source IP 0.0.0.0 Port 135
>
> I googled for this error before asking but I did not find anyone else with
> this error so I am forced to ask you for help. I did see that I should
> close
> port 135 with the dcombobulator program so I will do that if you advise.
>
> Is this a normal ZoneAlarm error or evidence of a spyware intrusion?
> What would YOU do if you saw this on your WinXP machine?
>
> Debbie
| 
XML site map