svhost

  [DELETED] 19:49 02 Dec 2003
Locked

A colleague at work has several instances of svhost.exe attempting to connect to the internet on his computer. Doing a Google search reveals it to be a Trojan and not to be confused with svchost, a genuine Windows program.

How can he get rid of it?

  [DELETED] 19:53 02 Dec 2003

Trojan removers click here click here click here

  [DELETED] 09:56 03 Dec 2003

Here's what the Firewall pops up on connection:

'Generic Host Process for Win32 service (svhost.exe) trying to broadcast to 239.255.255.250) using remote port (SSDP), do you wish this program access to the network?'

And also after that lately:

'svhost.exe contacted from remote machine using local port 135 (EPMAP) - Location service Dynamically assing ports for RPC, do you wish to allow this process'

  [DELETED] 10:20 03 Dec 2003

Try here click here
There's a few good ideas and links

  [DELETED] 10:36 03 Dec 2003

click here

Stinger can get rid of this too... click here

  [DELETED] 10:45 03 Dec 2003

Oh and then get him to use Anti virus and keep it up to date. click here is free.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Microsoft Surface Book 2 15in review

How to create explosive dance music graphics

When is the best time to buy an iPhone?

Quel antivirus gratuit choisir pour un PC ?