Zonealarm answered my email, well sort of. They replied with a lot of nonsense
that as far as I can tell doesn't even touch on answering my questions. I asked
about Windows Explorer, they replied about Win 2K. I thought Win 2K doesn't
use Explorer, am I wrong?
Thanks for using ZoneAlarm.
If you are using the Windows 2000 operating system, there are some default Processes which may prompt for access to the Internet.
The Services and Controller App is necessary in order for you to surf the web.
Generic host process for win32 is (like the name implies) a generic process, which acts as a host for other processes running from DLLs. Therefore, more than one entry for this process is possible. To see what processes are using you will need the Microsoft file Tlist.exe found on the Windows 2000 CD-ROM; the syntax is tlist -s at the command prompt.
RPCSS is the remote procedure call service.
SSH is a secure shell. This service supports the ability to re-direct ports on both local and remote machines (for example to pick up mail from a POP server). This allows you to access non-telnet services through an encrypted channel.
Winlogon.exe is the process responsible for managing user logon and logoff. Winlogon is active only when the user presses CTRL+ALT+DEL, at which point it shows the security dialog box.
Lsass.exe is the local security authentication server, and it generates the process responsible for authenticating users for the Winlogon service.
By default, it is not possible to stop a process by using Ctl-Alt-Del in W2K. One must use the KILL command line utility available with the Windows NT 4.0 Resource Kit. NOTE: this does not ship with Windows 2000 and must be purchased separately, contact Microsoft for the details.
Depending on what else you are running, W2K may also prompt DCOM for server rights to the Internet.
If you are concerned with DCOM for network security reasons then please continue reading. DCOM can be disabled but be aware that this will disable the ability to communicate for any program that is programmed to use DCOM, and may have unexpected results. Products such as Microsoft Message Queue and Microsoft Transaction Server use DCOM.
How to disable DCOM's ability to use networking:
The DCOM configuration utility is called DCOMCNFG.EXE. (By default it is in
W2K, in NT as of SP4; Win95 and 98 must be installed by user by download
from Microsoft).
Run DCOMCNFG, in the "Default Protocols" tab select and remove all listed
protocols. That should remove DCOM's ability to communicate via a network.
Regards,
Zone Labs Support
ORIGINAL MESSAGE:
-----------------
From: SIFKAJB
Posted At: 09:40:49.753 03/30/2001
Posted To: Multiple recipients of list support_list <support_list@zonelabs.com>
Subject: Distributed Coms Services
hi,
A program called Distributed Coms Services wanted to act
as a local server. I can not find any info on this program.
Is it part of Zone Alarm? I have settings set to disallow it
and everything works. Any info would be appreciated.
Also, why does Windows Explorer try to connect to the internet??
Thank You, Joe |
