Server Rights for SVCHOST.EXE and ALG.EXE - Allow or Deny?

[steve]

Does anyone know why the SVCHOST.EXE and ALG.EXE programs ask
occasionally for server rights, as my ZoneAlarm indicates. What are they
listening for? Are they Microsoft's Trojan horses???
Denying them server rights does not cause any noticeable problem... am I
missing anything by doing that?

Steve

[Brian Biggs]

Nothing to do with Windows, Check for virus & trojans

--
\\\///
/ _ _ \
( ©¿© )
*=o000============000o===========*
| Biggsy woz here
| Tweaks & Downloads
| http://homepage.ntlworld.com/brian.biggs
| To err is human to really foul things up use Norton
*================================*
,ooo0 0ooo,
( ) ( )
\ ( \ (
(_) (_)

"steve" <8....@rogers.com> wrote in message
news:3C0DBAE7...@rogers.com...

---
Wolston Computer Services mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.306 / Virus Database: 166 - Release Date: 04/12/2001

[Badger]

While it's always possible for a virus / trojan to call itself the same
thing as a legitimate Windoze file, it's pretty unlikely. I've heard of one
trojan that creates a SVCHOST.EXE file on the root directory; kosher
versions should exist in your windows\system32 folder.

Here's the info for SVCHOST.EXE (Generic Host Process for Win32 Services):
http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;Q250320&GSSNB
=1

As for ALG.EXE (Application Layer Gateway Service) - Microsoft don't appear
to have a KB article about this one. A bit of trawling has revealed that
it's used in conjunction with Internet Connection Sharing and the XP
Firewall. If you're not using either of these, then chances are you can
block it with no ill effects.

Badger

"Brian Biggs" <brian...@ntlworld.com> wrote in message
news:2KkP7.424$Fq6....@news11-gui.server.ntli.net...

[Noel]

What about the CBA Message System. What's that that and does it need server
rights?
Noel

"Badger" <no...@m.for.me> wrote in message
news:9ukra5$ln5$1...@news5.svr.pol.co.uk...