svchost.exe:456 w2k Web server is this trouble?

Discussion in 'malware problems & news' started by Austin, Sep 13, 2004.

Thread Status:
Not open for further replies.
  1. Austin

    Austin Registered Member

    Joined:
    Jul 11, 2004
    Posts:
    2
    I am using TCPView from sysinternals.com on my WIn2k server.
    This machine is not behind any firewall and serves up web sites colocated on the internet.

    I don't notice anything strange and nod32 says everythign is clean on this machine but tcpView reports connections to
    Process svchost.exe:456
    Protocoll TCP
    Local address <the colocatoon domain>epmap

    The remote addresses are always dialup addresses and they stay connected for long periods of time.

    Is this a problem?
    What is going on?
    Thanks.
     
    Austin, Sep 13, 2004
    #1
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...