I have what I think is a very good firewall and every time I boot up my computer I am warned that- "generic host process for win 32 is trying to contact" and then there is a site code given. Sometimes at boot up there are up to 3 different warnings given, ie three different sites. The warning will pop up intermittently while I'm using the computer along with another one- NT kernal and system. I use Yahoo as my browser and when I don't allow Generic Host to contact these sites I can't open to yahoo and if I go around through links to yahoo mail or games it won't let me open sub pages. I can however still browse to other web sites. Is this some built in demographic spy? My old 98 operating system didn't seem to have to contact anyone to work properly. I'm going to list the sites Generic Host tries to contact if that will help you; 224.0.0.22- 691.30.11- 239.255.255.250- 24.175.154.184. Thank you [Email address removed as per site policy. - AB Editor]
I think you will find this could be XP's automatic update checking for updates. Copy the ip's you list into your web browser and see where they take you. Also, go here- http://www.karenware.com/powertools/powertools.asp and download the free url discombabulator. It will tell you about the sites you input through the url or the ip. Also, if you are unhappy about it, tell your firewall to deny access.
I have the same problem (I use Sygate), but I don't think it's anything to do with auto updates, as these come through fine. I've refused the programs permission to connect and (so far) nothing has stopped working!
the short answer is yes! i have a firewall it is my firewall plus by webroot and microsoft gain info on you through media player, and other programs. media player is by far the worst!