Home > Zone Alarm > Zone Alarm & "Unknown Process" -?-

Zone Alarm & "Unknown Process" -?-

Unknown Process in ZoneAlarm Pro 3.7 2 post • Page:1 of 1 All times are UTC Board index Spam Report ThemeWelcome · log in · join Show navigation Hide navigation HomeReviewsHowChartsLatestSpeed Unknown Process - Erinit~1.exe Started by glueboot , Jun 04 2006 11:46 AM This topic is locked 7 replies to this topic #1 glueboot glueboot Members 22 posts OFFLINE Local wiz-king 06:04 19 Jan 05 have a look in sheduled tasks start/programs/accesories/system tools/scheduled tasks (I think on ME). For a tutorial on Firewalls and a listing of some available ones see the link below: Understanding and Using Firewalls Visit Microsoft's Windows Update Site Frequently - It is important that have a peek here

Top ZoneAlarm log processing tools? ZoneAlarm and @Home discovery process 13. Brad Top 1. Checked and double checked because all three major search engines asked if I meant SVCHOST.EXE.

also visit http://www.auditmypc.com/process/kernel32.asp have fun ! [URL="http://www.thewindowsclub.com/"]www.TheWindowsClub.com[/URL] Microsoft MVP 30-06-2005,02:26 PM #4 saROMan View Profile View Forum Posts QA Juggler Join Date Aug 2004 Location format c: /s/u/x Posts 801 Post By default, many operating systems install auxiliary services that are not critical, such as an FTP server, telnet, and a Web server. Here's the new log:Logfile of HijackThis v1.99.1Scan saved at 23:20:12, on 05/06/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\ACS.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exeC:\WINDOWS\system32\DVDRAMSV.exeC:\Program Files\ewido Configure your email server to block or remove email that contains file attachments that are commonly used to spread viruses, such as .vbs, .bat, .exe, .pif and .scr files.

Adds the values: Welcome = %System%\kernel32.exe to the registry key: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run so that the Trojan runs each time you start Windows. Isolate infected computers quickly to prevent further compromising your organization. After every page would load my CPU would go all the way to 100%. Is that the kind of thing you mean?

Book your tickets now and visit Synology. This thread is now locked and can not be replied to. If I have helped you in any way, please consider a donation to help me continue the fight against malware.Failing to respond back to the person that is giving up their This program is a registered security risk and should be removed immediately.

I click on "no" and every thing seems ok. You may have to register before you can post: click the register link above to proceed. chiazSeptember 4th, 2009, 04:16 PMAs I told you, it's probably malware. The Trojan locates the System folder and copies itself to that location.

Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exeO9 - Extra 'Tools' menuitem: Yahoo! Attached Files: za 1.jpg File size: 101.2 KB Views: 68 cwolfe98, Nov 15, 2001 #4 cwolfe98 Thread Starter Joined: Jul 11, 2001 Messages: 606 ... Tango 21:39 09 Jan 05 Locked I keep getting requests via my Firewall for a program called "Unknown Process" to access the Internet.Each time that it makes its request, it has If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

If you could tell me how to fix this problem and sort out my processes that would be great.Logfile of HijackThis v1.99.1Scan saved at 17:40:09, on 04/06/2006Platform: Windows XP SP2 (WinNT http://popupjammer.com/zone-alarm/zone-alarm.html uniqs135 Share « Problem installing a FTP server behind Zone Alarm • Did someone set up an FTP on my computer? » Jeff5286join:2000-08-10Forest Hills, NY Jeff5286 Member 2002-Dec-22 10:42 pm Anyone The information in the Whois report comes from the Regional Internet Registry (RIR) for the region where 66.197.161.149 is located: ARIN, RIPE, LACNIC or APNIC. Tango 21:36 22 Jan 05 mattyc_92What I posted was from ZA's Advanced details when I said the Firewall does not know what this is etc. - not very helpful is it

I did but I still don't know what it is or why it wanted to access the internet. Advertisements Latest Threads Here's how you can still get a free Windows 10 upgrade Abarbarian posted Mar 18, 2017 at 3:34 PM Microsoft blocks updates for old hardware Abarbarian posted Mar You may want to consider a full diagnostic through one of the forums I posted; but it's your choice. :) wrgarrettSeptember 4th, 2009, 04:20 PMThanks much! Check This Out If it prompts you as to whether or not you want to save the settings, press the Yes button.Next press the Apply button and then the OK to exit the Internet

I attached another pic on this post an will attach pic #2 on next post. (Since you can only have 1 attachment to each post.) Whaddayathink? I haven't come across anything either, but was thinking of writing something which continually checked the log and if it changed in size parsed the most recent entry(ies) and automatically did The name of the RIR appears in the Whois report.

Newer Than: Search this thread only Search this forum only Display results as threads Useful Searches Recent Posts More...

Page 2 of 2 < 1 2 Topic Tools #16 June 2nd, 2005, 01:08 AM AnnMarie CTH Subscriber Join Date: Oct 2001 O/S: Windows Vista 32-bit Location: Use a Firewall - I can not stress how important it is that you use a Firewall on your computer. ForumsJoin Forums → Software and Operating Systems → Security → Anyone familiar with this Zone Alarm alert? Very Computer Board index Security ZoneAlarm log processing tools?

Powered by vBulletin Version 4.2.3 Copyright © 2017 vBulletin Solutions, Inc. HOUSTON - TX - (JOBS!) VB/SQL 7. I don't even let NAV update via its own live update routine - I always connect to the I/N VIA Norton and check for update every time I want to use this contact form Attached Files: za 2.jpg File size: 90.2 KB Views: 114 cwolfe98, Nov 15, 2001 #5 Rollin' Rog Joined: Dec 9, 2000 Messages: 45,855 From the looks of what Net.Medic does, I'd

chiazSeptember 4th, 2009, 06:30 PMSuccessful resolution reached here: http://icrontic.com/forum/showthread.php?p=708266#post708266 :) PC Advisor Phones Smartphone reviews Best smartphones Smartphone tips Smartphone buying advice Smartphone deals Laptops Laptops reviews Laptops tips Best laptops Will it was really taking a big hit on my PC. Adds the value: Sevice = %System%\kernel32.exe to the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\ RunServices so that it runs as a service under Windows 95/98/Me, and it is not displayed in the Windows Join over 733,556 other people just like you!

The instructions on their web site said to send the file in a passworded zip file. Advertisement Recent Posts playing video files flavallee replied Mar 18, 2017 at 11:56 AM Dual Boot XP & 7 Triple6 replied Mar 18, 2017 at 11:55 AM Please help, BIOS blue Shadow2531, Nov 15, 2001 #2 Rollin' Rog Joined: Dec 9, 2000 Messages: 45,855 It looks like some kind of development tool to find the meaning of an "activex" error. So if you see the alert after starting IE or OE, or some other program you KNOW is trying to access the net (*because you just asked it to*), it is

NOTES: %System% is a variable. Please thank your helpers and there will always be help here when you need it!======================================================== Back to top #3 glueboot glueboot Topic Starter Members 22 posts OFFLINE Local time:11:57 AM Similar Threads - Zone Alarm Unknown Solved Keep getting alarms/alerts that my PC being hacked/killed Jaybird66, Nov 17, 2016, in forum: Virus & Other Malware Removal Replies: 1 Views: 203 Triple6 I was not using this program at the time, but I do use it very often.

If you need this topic reopened, please contact a member of the HJT Team and we will reopen it for you. Please thank your helpers and there will always be help here when you need it!======================================================== Back to top #7 glueboot glueboot Topic Starter Members 22 posts OFFLINE Local time:11:57 AM Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - F:\PROGRA~2\Yahoo!\MESSEN~1\YPager.exe O9 - Extra 'Tools' menuitem: Yahoo! Will I was having troubles with What: Local router status and Who: First Local router.

I certainly will. If I have helped you in any way, please consider a donation to help me continue the fight against malware.Failing to respond back to the person that is giving up their If they are removed, blended threats have less avenues of attack and you have fewer services to maintain through patch updates. pls do not confuse the virus/trojan file, Kernel32.exe, with the legitima windows file, kernel32.dll.

I had only started using ZoneAlarm all the time after the code red came out so this trouble was new to me. Please thank your helpers and there will always be help here when you need it!======================================================== Back to top #5 glueboot glueboot Topic Starter Members 22 posts OFFLINE Local time:11:57 AM This alone can save you a lot of trouble with malware in the future.