Help!! constantly connected to microsoft and cannot block it

In article , James wrote: : All the time I am connected to the Internet my computer is :constantly giving information to

Was that a typo, with it being 'microsoft' instead of 'midrosoft' ?

: Using Win XP Home NIS 2004.

dlservice.microsoft.com is a Microsoft Download Server. Based upon the 'msgr', probably for MSN Instant Messanger.

a) Try turning off MSN and see if it stops;

b) If so, look at the MSN preferences and see if there is a way to turn off automatic updates.

I speculate that it might even just be MSN trying to register you as now being available for MSN Instant Messanger chats.

svchost.exe is the messenger for the O/S to communicate. However, malware can use svchost.exe on its behalf too. You should find out what is using the messenger and kill that and not the messenger.

Duane :)

Duane :)

Hi, I am going to give Process Explorer a try.

URL should read

In article , James wrote: :URL should read

If I recall correctly, XP SP2 installs MSN Messenger; the above is -potentially- attempts to update it. I find reference to the executable name as being the MSN 7.0 installer. See, e.g.,

svchost.exe provides serveral different network services on Windows. If you look thorugh your running services you'll notice that several different services run from svchost.exe, just with different startup options. The reason you lose your internet connection when you block "Microsoft Generic host process for win32" in your firewall your really blocking svchost.exe and any service it provides. The DHCP Client service is one of the services provided by svchost.exe. When you block svchost.exe in your firewall, the firewall will block DHCP Client, which means you cant grab an IP. No IP means no internet connection. If I had to guess, it's probably the automatic update service that keeps talking to Microsoft. Go into your services and disable it and see if that gets rid of the weird connection back to MS.

-jared

Its MSN Messenger. I did a little research on the URL it connects to. Not the Messenger service (although that can disabled too), but the IM client. Check the MSN Messenger settings, set Messenger not to start when Windows boots and disable the option to allow MSN Messenger to run in the background.

-jared

Thanks Jared, I am sure you are right. I have run Spyware scans with Spybot Ad-Aware and Microsoft Anti-Spy. Virus scans using NAV 2004 and Tauscan and nothing unusual shows. I don't have MSN Messenger only Windows Messenger with a Hotmail account using a Net Passport. This is not set to start when windows runs at startup. I have found that if I block all traffic for a minute using my Firewall and then allow traffic these problems then stop and the relevant cc proxies go to listening status from the previous established connection. I have only just noticed all this because my systray Internet thingy was permanently lighting up and normally it only does this on loading a web page or downloading etc. All this seemed to happen after I had upgraded Spybot from 1.3 to 1.4 although I cannot think of a reason why. Thanks all posters for the help. Thanks and Regards James