Svchost.exe???

    denne exe fil kører er det en trojan? jeg har den også i mine forbindelser, altså i diverse programmer, hvor jeg kan se mine forbindelser...


    som her:


    Connections report. Created at 05-10-2003 00:14:52
    ----------------------------------------------------------------------------------------------------
    | Protocol | Local Address Port | Remote Address Port | Status | Process:PID
    ----------------------------------------------------------------------------------------------------
    TCP 0.0.0.0 :135 0.0.0.0 :0 LISTENING SVCHOST.EXE:720
    TCP 0.0.0.0 :445 0.0.0.0 :0 LISTENING System:4
    TCP 0.0.0.0 :1025 0.0.0.0 :0 LISTENING SVCHOST.EXE:800
    TCP 0.0.0.0 :1132 0.0.0.0 :0 LISTENING System:4
    TCP 0.0.0.0 :1994 0.0.0.0 :0 LISTENING wcmdmgr.exe:2716
    TCP 0.0.0.0 :2643 0.0.0.0 :0 LISTENING msnmsgr.exe:1976
    TCP 0.0.0.0 :2670 0.0.0.0 :0 LISTENING iexplore.exe:1144
    TCP 0.0.0.0 :2675 0.0.0.0 :0 LISTENING iexplore.exe:1144
    TCP 0.0.0.0 :3006 0.0.0.0 :0 LISTENING msnmsgr.exe:1976
    TCP 0.0.0.0 :3007 0.0.0.0 :0 LISTENING msnmsgr.exe:1976
    TCP 0.0.0.0 :5000 0.0.0.0 :0 LISTENING SVCHOST.EXE:928
    TCP 10.0.0.2 :139 0.0.0.0 :0 LISTENING System:4
    TCP 10.0.0.2 :2642 213.244.183.214:80 TIME_WAIT [System Process]:0
    TCP 10.0.0.2 :2643 207.46.106.158 :1863 ESTABLISHED msnmsgr.exe:1976
    TCP 10.0.0.2 :2645 213.244.183.214:80 TIME_WAIT [System Process]:0
    TCP 10.0.0.2 :2647 213.244.183.214:80 TIME_WAIT [System Process]:0
    TCP 10.0.0.2 :2670 81.19.239.229 :80 ESTABLISHED iexplore.exe:1144
    TCP 10.0.0.2 :2675 81.7.129.232 :80 ESTABLISHED iexplore.exe:1144
    TCP 10.0.0.2 :3007 148.122.172.3 :80 CLOSING msnmsgr.exe:1976
    UDP 0.0.0.0 :135 0.0.0.0 :0 LISTENING SVCHOST.EXE:720
    UDP 0.0.0.0 :445 0.0.0.0 :0 LISTENING System:4
    UDP 0.0.0.0 :500 0.0.0.0 :0 LISTENING LSASS.EXE:560
    UDP 0.0.0.0 :1026 0.0.0.0 :0 LISTENING SVCHOST.EXE:800
    UDP 0.0.0.0 :1033 0.0.0.0 :0 LISTENING SVCHOST.EXE:884
    UDP 0.0.0.0 :1035 0.0.0.0 :0 LISTENING SVCHOST.EXE:884
    UDP 0.0.0.0 :1040 0.0.0.0 :0 LISTENING SVCHOST.EXE:884
    UDP 0.0.0.0 :2455 0.0.0.0 :0 LISTENING SVCHOST.EXE:884
    UDP 0.0.0.0 :2651 0.0.0.0 :0 LISTENING msnmsgr.exe:1976
    UDP 0.0.0.0 :4998 0.0.0.0 :0 LISTENING SVCHOST.EXE:884
    UDP 10.0.0.2 :9 0.0.0.0 :0 LISTENING msnmsgr.exe:1976
    UDP 10.0.0.2 :123 0.0.0.0 :0 LISTENING SVCHOST.EXE:800
    UDP 10.0.0.2 :137 0.0.0.0 :0 LISTENING System:4
    UDP 10.0.0.2 :138 0.0.0.0 :0 LISTENING System:4
    UDP 10.0.0.2 :1900 0.0.0.0 :0 LISTENING SVCHOST.EXE:928
    UDP 10.0.0.2 :10565 0.0.0.0 :0 LISTENING msnmsgr.exe:1976
    UDP 127.0.0.1 :123 0.0.0.0 :0 LISTENING SVCHOST.EXE:800
    UDP 127.0.0.1 :1460 0.0.0.0 :0 LISTENING iexplore.exe:1144
    UDP 127.0.0.1 :1900 0.0.0.0 :0 LISTENING SVCHOST.EXE:928
    UDP 127.0.0.1 :2644 0.0.0.0 :0 LISTENING msnmsgr.exe:1976
    UDP 127.0.0.1 :4016 0.0.0.0 :0 LISTENING iexplore.exe:2564
    ----------------------------------------------------------------------------------------------------
    Created by IP-Tools (http://HTTP://www.ks-soft.net)




    ???? ka det være en trojan?

    Nej det er ikke en trojan


    Et lille quote :
    The Service Host Process is generic host process for services that are run from dynamic-link libraries (DLLs)


    Altså en process der styrer alle dine dll-filer ;)

    En lidt bedre forklaring :


    Svchost.exe is a generic host process name for services that are run from dynamic-link libraries (DLLs). The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. There can be multiple instances of Svchost.exe running at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where Svchost.exe is started. This allows for better control and debugging.

    Quote

    Originally posted by Aerial
    En lidt bedre forklaring :


    Svchost.exe is a generic host process name for services that are run from dynamic-link libraries (DLLs). The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. There can be multiple instances of Svchost.exe running at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where Svchost.exe is started. This allows for better control and debugging.


    Tak for det :)


    Har selv spekuleret over svchost.exe :P

    Quote

    Originally posted by Aerial
    En lidt bedre forklaring :


    Svchost.exe is a generic host process name for services that are run from dynamic-link libraries (DLLs). The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. There can be multiple instances of Svchost.exe running at the same time. Each Svchost.exe session can contain a grouping of services, so that separate services can be run depending on how and where Svchost.exe is started. This allows for better control and debugging.


    som altid er du klar med et svar Aerial, jeg takker! ;)