svhost

  Richard Madeley 19:49 02 Dec 2003
Locked

A colleague at work has several instances of svhost.exe attempting to connect to the internet on his computer. Doing a Google search reveals it to be a Trojan and not to be confused with svchost, a genuine Windows program.

How can he get rid of it?

  VoG II 19:53 02 Dec 2003

Trojan removers click here click here click here

  Richard Madeley 09:56 03 Dec 2003

Here's what the Firewall pops up on connection:

'Generic Host Process for Win32 service (svhost.exe) trying to broadcast to 239.255.255.250) using remote port (SSDP), do you wish this program access to the network?'

And also after that lately:

'svhost.exe contacted from remote machine using local port 135 (EPMAP) - Location service Dynamically assing ports for RPC, do you wish to allow this process'

  AndyJ 10:20 03 Dec 2003

Try here click here
There's a few good ideas and links

  Jester2K II 10:36 03 Dec 2003

click here

Stinger can get rid of this too... click here

  Jester2K II 10:45 03 Dec 2003

Oh and then get him to use Anti virus and keep it up to date. click here is free.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

HP Envy x2 review: Hands-on

How Sketch and InVision have revolutionised our design workflow

The best tech gifts for Christmas 2017

Les meilleurs jeux de société (2017)