| View previous topic :: View next topic |
| Author |
Message |
RockAndRollBand Cheater
Reputation: 0
Joined: 12 Aug 2009 Posts: 34
|
Posted: Sun Jan 24, 2010 1:23 pm Post subject: Svchost.exe connecting? |
|
|
I know it's a legit component of computer but does this need an internet inbound and outbound connection? I got auto updates on some of my computers installations i heard that can be what causes inbound connections, is this true?
_________________
You Got The Boom Chicka Wow Wow |
|
| Back to top |
|
 |
Alphamabet Master Cheater
Reputation: 0
Joined: 03 Jan 2009 Posts: 452
|
Posted: Mon Jan 25, 2010 4:37 am Post subject: |
|
|
| Find the location of it. I found one in my temp folder and it was gobbling up my CPU. If it's not in your system 32 folder i suggest you delete it.
|
|
| Back to top |
|
 |
Fap2Admin Master Cheater
Reputation: -1
Joined: 10 Feb 2008 Posts: 483 Location: Somewhere down the Road
|
Posted: Mon Jan 25, 2010 4:46 am Post subject: |
|
|
Download Autoruns from Sysinternals Site (www.sysinternals.com) and find the svchost.exe OUTSIDE system32 9if there's any). After that, remove the "check" joe.
Check other applications that is connected to the "svchost" too, if there's any.
_________________
Best AR-TITS on CEF |
|
| Back to top |
|
 |
Hero I'm a spammer
Reputation: 79
Joined: 16 Sep 2006 Posts: 7154
|
Posted: Mon Jan 25, 2010 3:26 pm Post subject: |
|
|
| I always block svchost, even if its a real one. It won't hurt anything to block it. You can have fakes in system32 also. It can be one of the worst viruses to get.
|
|
| Back to top |
|
 |
Gilles de la Tourette Master Cheater
Reputation: 7
Joined: 03 Dec 2006 Posts: 280
|
Posted: Mon Jan 25, 2010 3:40 pm Post subject: |
|
|
I had a virus which was adding 100s of svchosts.exe all the time filling all my RAM up.
Damn that was a nasty virus.
|
|
| Back to top |
|
 |
SF I'm a spammer
Reputation: 119
Joined: 19 Mar 2007 Posts: 6028
|
Posted: Mon Jan 25, 2010 5:44 pm Post subject: |
|
|
I'm curious if svchost.exe should only be sending data to others, or if it should also receive. Right now ESET is blocking an inbound attempt from 10.24.17.102 (private) port 59397, and yes - it is the real svchost.exe in system32\
_________________
|
|
| Back to top |
|
 |
hcavolsdsadgadsg I'm a spammer
Reputation: 26
Joined: 11 Jun 2007 Posts: 5801
|
Posted: Mon Jan 25, 2010 11:49 pm Post subject: |
|
|
afaik svchost might be seen connecting to a couple things, like windows update, time server, etc. considering what svchost is, it sounds logical enough that you might find a connection under it every so often.
there's a couple ways to see what exactly is running under each instance, so checking this out might be a good idea.
|
|
| Back to top |
|
 |
|