Re: Is SVCHOST.EXE a genuine process?
From: Kent W. England [MVP] (kwe_at_mvps.org)
Date: 08/16/04
- Next message: Multicoder4002: "Re: Ace Password Sniffer : How does it work ?"
- Previous message: Lance: "Re: Is SVCHOST.EXE a genuine process?"
- In reply to: imoorthy: "Is SVCHOST.EXE a genuine process?"
- Next in thread: imoorthy: "Re: Is SVCHOST.EXE a genuine process?"
- Reply: imoorthy: "Re: Is SVCHOST.EXE a genuine process?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 15 Aug 2004 22:49:32 -0700
imoorthy wrote:
> I run WIN XP Pro on my home laptop. Everytime I power on and when the system
> is nearly up and running, the firewall(ZA Pro) says that the program
> SVCHOST.exe wants to contact the internet. This is even before I am connected
> to the internet (dial up).
>
> I remember reading someplace that the above program could be a result of a
> virus infection(have Norton AV2004 Pro). Please clarify 1) what kind of
> program is this SVCHOST and 2) can I safely delet it. Another important
> observation is unless i allow this program to contact internet, both Internet
> explorer and Outlook express return error messages.
%windir%\system32\svchost.exe is an important Windows file. If you find
svchost.exe in another location (except for
%windir%\$NTServicePackUninstall$) then that is malware, as are
scvhost.exe and other similar variants.
Your symptoms sound normal. Allow svchost.exe to contact the Internet.
-- Kent W. England, Microsoft MVP for Windows Security
- Next message: Multicoder4002: "Re: Ace Password Sniffer : How does it work ?"
- Previous message: Lance: "Re: Is SVCHOST.EXE a genuine process?"
- In reply to: imoorthy: "Is SVCHOST.EXE a genuine process?"
- Next in thread: imoorthy: "Re: Is SVCHOST.EXE a genuine process?"
- Reply: imoorthy: "Re: Is SVCHOST.EXE a genuine process?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
