Home All Groups Group Topic Archive Search About

svchost.exe to the Web?

Author
11 Oct 2006 5:09 PM
Pop
Well, should I allow svchost.exe access the web?
It keep on poping up my firewall and I keep on deny it without apply a rule.
But it seems nothing happen to me, I still can access the Web with no problem.
So, should I?

Thanks in advance.

Author
11 Oct 2006 9:26 PM
Chuck
On Wed, 11 Oct 2006 10:09:02 -0700, Pop <P**@discussions.microsoft.com> wrote:

>Well, should I allow svchost.exe access the web?
>It keep on poping up my firewall and I keep on deny it without apply a rule.
>But it seems nothing happen to me, I still can access the Web with no problem.
>So, should I?
>
>Thanks in advance.

Some legit processes, running under svchost.exe, have a legitimate need to
access the web.  Others don't.  Some trojan payloads run as svchost.exe, or a
look alike name, like svch0st.exe, or svchost.exe in a different folder.

You can use Process Explorer to tell you which svchost.exe is generating the
access request, and what activates the request.
<http://nitecruzr.blogspot.com/2006/04/watching-what-your-computer-is-doing.html>
http://nitecruzr.blogspot.com/2006/04/watching-what-your-computer-is-doing.html

You also might want to check for malware, finishing with HijackThis and expert
advice.
<http://nitecruzr.blogspot.com/2005/05/dealing-with-malware-adware-spyware.html>
http://nitecruzr.blogspot.com/2005/05/dealing-with-malware-adware-spyware.html

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My        email         is          AT         DOT
   actual       address    pchuck       mvps        org.