Hello all. Thanks for the great info. Here's my situation...
From what I've read, svchost.exe is a generic host
process name for services that are run from dynamic-link libraries (DLLs).
http://support.microsoft.com/?kbid=250320
I have "Norton Internet Security" [NIS] running (a GREAT tool, by the way ... even has advertisement blocking). It prompted me with an alert about svchost.exe trying to make inbound contact. It listed the Remote IP address as 210.5.22.23 I used NeoTrace (another great tool that graphically maps a traceroute on a globe) and it was to Beijing. Here's the who-is:
Quote:
Administrative Contact, Technical Contact:
DATA COMMUNICATION BUREAU (35347100O) lsy@PUBLICF.BTA.NET.CN
A12,Xin-Jie-Kou-Wai-Da-Jie
Beijing, Beijing 100088
CN
86-10-62053991
|
What the #@$* ?? I've since instructed NIS to disalllow all svchost attempts of this type.
Any idea on what this is?