Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Zonealarm Log


  • Please log in to reply
2 replies to this topic

#1 JeanRich

JeanRich

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:08:27 PM

Posted 06 May 2007 - 03:33 PM

ZoneAlarm log says it has blocked sychost.exe outbound. I understand this is a bad file. A search on my computer didn't locate any such file. I ran Ad-Aware, AVG, Spybot, Spyware Dr., Spyware Terminator. I also have Spyware Guard. Nothing bad showed up on any of these. Should I be concerned?

Sorry,after closer look, the file svchost.exe

Edited by JeanRich, 06 May 2007 - 04:42 PM.


BC AdBot (Login to Remove)

 


#2 rlprlp

rlprlp

  • Members
  • 198 posts
  • OFFLINE
  •  
  • Local time:04:27 PM

Posted 06 May 2007 - 06:24 PM

How did you come to the understanding that this is a bad file? This one seemed to me to have the best explanation: http://www.neuber.com/taskmanager/process/svchost.exe.html Good luck!

#3 JeanRich

JeanRich
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:08:27 PM

Posted 06 May 2007 - 08:13 PM

I found this info. I also checked and found it located in the C:\windows\system32 location. It is also found at C:\windows\servicepackfiles\i386 When I saw it blocked by ZoneAlarm I got concerned. (By the way, I have used ZA for a few years along with Firefox. No problems with them at all.)


Description:
svchost.exe is a system process belonging to the Microsoft Windows Operating System which handles processes executed from DLLs. This program is important for the stable and secure running of your computer and should not be terminated.

Note: svchost.exe is a process registered as a backdoor vulnerability which may be installed for malicious purposes by an attacker allowing access to your computer from remote locations, stealing passwords, Internet banking and personal data. If unaccounted for, this process should be removed immediately.

Note: svchost.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.

Note: svchost.exe is a process belonging to Microsoft Service Host Process. This could also be a stealth monitoring software that sits in the background and tracks all activities such as keyboard input (including websites visited, passwords etc.) This information can be sent to third parties through email or ftp uploads. If you did not intentionally install this program make sure you remove it to protect your privacy.

Determining whether svchost.exe is a virus or a legitimate Windows process depends on the directory location it executes or runs from.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users