Please help me: "C:WINDOWSSystem32svchost.exe -k netsvcs"

G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

Hi everybody,

I got a trouble:
Process "C:\WINDOWS\System32\svchost.exe -k netsvcs" tries to
directly connect to remote host through http port, but i'm behide a
firewall so it can not establish the connection. each time it fails to
connect, it stops to wait for awhile then starts again, time after
time. IPs of remote host is changed each time the attempt fails:
61.58.44.222, 207.46.66.254, 64.4.23.93, 202.47.29.29, 61.58.44.222,
218.213.254.30...
Services registered to this process (C:\WINDOWS\System32\svchost.exe
-k netsvcs) are descibed in attached image.

i don't understand what it is. is there anyone can explain me this?

my mail is: gti_hien@yahoo.com. i'll be very pleased if you can email
me.

thanks in advanced.


+-------------------------------------------------------------------+
|Filename: untitled.JPG |
|Download: http://www.pcbanter.net/attachment.php?attachmentid=2625 |
+-------------------------------------------------------------------+

--
oldfunnyangel
 
G

Guest

Guest
Archived from groups: microsoft.public.windowsxp.help_and_support (More info?)

"oldfunnyangel" <oldfunnyangel.1v3adw@pcbanter.net> wrote in message
news:eek:ldfunnyangel.1v3adw@pcbanter.net...
>
> Hi everybody,
>
> I got a trouble:
> Process "C:\WINDOWS\System32\svchost.exe -k netsvcs" tries to
> directly connect to remote host through http port, but i'm behide a
> firewall so it can not establish the connection. each time it fails to
> connect, it stops to wait for awhile then starts again, time after
> time. IPs of remote host is changed each time the attempt fails:
> 61.58.44.222, 207.46.66.254, 64.4.23.93, 202.47.29.29, 61.58.44.222,
> 218.213.254.30...
> Services registered to this process (C:\WINDOWS\System32\svchost.exe
> -k netsvcs) are descibed in attached image.
>
> i don't understand what it is. is there anyone can explain me this?
>

Google is your friend:

http://www.google.com/search?hl=en&lr=&q=%22svchost.exe+-k+netsvcs%22&btnG=Search

It is how some services are loaded. Malware sometimes uses this to load.
Read some of the links found in the google search for more detailed info on
how to determine what is loaded by this command.

Kerry