BogMonster Posted September 21, 2005 Share Posted September 21, 2005 I was browsing the other day when I got a load of firewall alerts for nasty things trying to do stuff, I blocked all of them and thought nothing more of it. But now as soon as I start the PC up (I only have a dialup internet connection) it wants to connect to the internet, and if I am connected to the ISP, as soon as I disconnect it comes up with the connection dialog again. As far as I can tell from the firewall the program trying to connect is c:\windows\system32\svchost.exe which I am sure is a legitimate system file - at least, if I allow the connection this comes up, does a bit of traffic in and out then shuts up for a short time, then does a bit more etc etc. Is this something dodgy going on or what? It never used to do this. Any advice from learned IT gurus would be appreciated - I have done a virus scan etc but apparently nothing amiss, maybe I'm just paranoid!? thanks Stephen Quote Link to comment Share on other sites More sharing options...
western Posted September 21, 2005 Share Posted September 21, 2005 :\windows\system32\svchost.exe it's part of the Windows operating system, [on my pc as well] could be looking for Windows Update site to carry out updates, that's my guess Quote Link to comment Share on other sites More sharing options...
dottythe90 Posted September 21, 2005 Share Posted September 21, 2005 You should be able to test that theory out by switching off Automatic Updates. Then go to the windowsupdate.microsoft.com site and ensure you are up to date with the latest security patches. STEVE Quote Link to comment Share on other sites More sharing options...
BogMonster Posted September 24, 2005 Author Share Posted September 24, 2005 Turned out to be a frggn trojan!! NAV didn't pick it up on last week's virus defs but I noticed there were two msmsgs.exe programs running so after a bit of digging I found there's a virus that uses the same filename, this weeks virus defs did pick it up now got rid of ... more info here if anybody is interested Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.