svchost.exe

[S. Shagam]

My firewall occassionally pops up with a message stating that a remote
address is trying to access svchost.exe. I am blocking access but does
anyone know who or why a remote would be trying to reach this file?
Spybot and Adaware are not showing anything unusual.

Thanks for any assistance

[null@zilch.com]

On Wed, 20 Aug 2003 12:56:01 -0400, "S. Shagam" <sshagam@erols.com>
wrote:

>My firewall occassionally pops up with a message stating that a remote
>address is trying to access svchost.exe. I am blocking access but does
>anyone know who or why a remote would be trying to reach this file?
>Spybot and Adaware are not showing anything unusual.

There are several malwares that "play games" with this file. See for
just one example:

http://www.sophos.com/virusinfo/anal...ojunreala.html

Have you scanned your drive(s) using a good antivirus product or two?


Art
http://www.epix.net/~artnpeg

[JR]

It's Blaster virus (aka Lovsan).