Messenger? Generic Host Process for Win32 Server?

[spthomas]

I often see traffic on the firewall that I didn't know was happening. So I look at what it is (using ZoneAlarm) and it says repeatedly one of two things:
1. Messenger
2. Generic host PRocess for Win32 Server.

I've disalbled and stopped the Messenger service under Adminstrative Tools/Services/Messenger. I just verified that. So what is this Messenger that is sending traffic to the internet?

And what is Generic Host PRocess for Win32 Server?

Is there any utility that will tell me more about what's passing traffic across my network connection? It happens on the wireless 802.11b, and on my dial up, and on wired DSL.

=Steve=

 

[bcastner]

You have stopped the Windows Messenger Service, but you have not stopped Windows Messenger, a completely different product used for IM communications.

There are several tricks to remove Windows Messenger. This one will certainly remove it:

Start, Run, (the following is a single line)
RunDll32 advpack.dll,LaunchINFSection %windir%\INF\msmsgs.inf,BLC.Remove

You should permit the Generic Host Process traffic.

 

[linney]

These are mainly Log Analysers.

http://zonelog.co.uk

http://www.google.com/search?hl=en&...larm+firewall+log+analysis&btnG=Google+Search

Port Explorer.

Port Explorer allows you to see all the open ports on your system and what programs own them (called Port to Process mapping). Along with this ability it also has many tools including a packet sniffer, bandwidth throttling and country detection all in an easy to use graphical interface.

http://www.diamondcs.com.au/