svchost.exe & ntoskrnl.exe ?? any one knows

[Hellfighter]

will i did disable the DNS client thing seem to be running better now.

i do have to ask something maybe you know what they are:
1.) svchost.exe 9ea
2.) ntoskrnl.exe 2ea

running connecting to the INTERNET is it ok? for now i have them blocked using my firewall. are they ok been getting hit thru the INTERNET seem some one is trying to get to them. getting warning of them getting to these files.

they like to connect to the INTERNET are they needed? if not how to disable them.

[EDGE]

its gotta be hosting something. As you can see in the name svchost.exe. Never ran into them on my comp or anyone else I know. mmmmm....Ill see if I can find anything on it.

[Hellfighter]

don't know if this help any files are made by Mircosoft.
WIndows xp pro but i see no need for them to be running. any help be great thank E.D.G.E

[Nev]

svchost.exe is an integral part of windows. it's the prog that runs the services, including windows networking/filesharing, dns-client and a load of other stuff.

ntoskrnl.exe is the kernel, the core of the operating system

anyway, anything that connects to 127.0.0.1 (localhost) can't do any harm because it's your own pc.

but if ANYTHING from the internet that tries to connect to your svchost.exe (mostly on ports 135 and 445) can be regarded as a virus. you should block any incoming connections to svchost.exe from the internet, but not from your internal network.

alg.exe is the application-layer gateway. it's needed if you share your internet connection with other pcs in the network.
but i don't see any reason why it should listen on connections from outside


ps: why do you have a dns-server running?

and edge: it's certainly running on ANY XP/2000 machine, usually 2-5 processes simultaneously. look at the processes tab in your taskmanager

[Hellfighter]

Originally posted by Nev

PS: why do you have a DNS-server running?

and edge: it's certainly running on ANY XP/2000 machine, usually 2-5 processes simultaneously. look at the processes tab in your task manager

it not what you think it is guy DNS is disable read the whole thing it blocking IP address of the ad-ware service 127.0.01 and relaying it back to my comp so it think it not there or busy program really call: DNSKong.exe

Pieter_ArntzHi Chief ADFP,

Before you go paranoid on me, read up on what a hosts file does: http://accs-net.com/hosts/

Regards,

Pieter

new item i got to fight ad-ware crap it reply it back into my system.

Read about it:
"Click-here"

sample when a spyware/ad-ware/tracker for advertiser loads up to the INTERNET say 127.0.0.1 yahoo.com what it dose turn it around back into the system fools it into thinking the service is no longer there or busy (can't find it) and after a time windows tell it no then is there and it close down. it stop it. anything other 127.0.0.1 go thru ok.

[~MOUSE~]

A description of Svchost.exe in Windows XP LINK

Ntoskrnl.exe discussion
LINK

Do Not try to remove "Ntoskrnl.exe", it will screw xp up.

[Hellfighter]

Originally posted by ~MOUSE~
A description of Svchost.exe in Windows XP LINK

Ntoskrnl.exe discussion
LINK

Do Not try to remove "Ntoskrnl.exe", it will screw xp up.

ok thank mouse thats all i needed to know.

if any one can dig up more on them 2 items i love to read it.
going to get some sleep been up now 36 hours dead beat at this time be back say in 6hrs from now or so.

[Hellfighter]

Originally posted by Nev

but if ANYTHING from the internet that tries to connect to your svchost.exe (mostly on ports 135 and 445) can be regarded as a virus. you should block any incoming connections to svchost.exe from the internet, but not from your internal network.

and edge: it's certainly running on ANY XP/2000 machine, usually 2-5 processes simultaneously. look at the processes tab in your taskmanager

mostly on ports 135 and 445
both of them are listing to them ports 1ea-135 & 2ea-445 will i block them off thats good.