svhost??????

[Steve Randles]

Elton:

Well said, Steve    

Well yes..at first I thought I might have been on the wrong track, so removed my comments because they reffered to svc host.exe

 

The problem Chesters is having is svhost...and is or are, known threats.

 

A search on the symantec site using svhost gave these results here...

http://search.symantec.com/custom/us/query.html

 

And the first one on the list is here http://securityresponse.symantec.com/avcen...r.socksbot.html

 

This latter url mentions Proxyspam.exe.

Socks8080.exe, which is also copied to the computer as Svhost.exe. These are port scanning programs I believe and are as such looking for ways into and out of your system and possibly (Newt will clear this up ) Looking for ways into other systems using your system as a proxy switch. Sometimes these programs set up mail servers and send spam out from your system.

 

So Chesters..was it svc host or svhost?

[Newt]

Steve -

 

chesters1:

yes looked properly this time and it is indeed .. svchost.exe and what a busy litle thing it is:

 

[ 09. August 2004, 01:54 PM: Message edited by: Newt ]