what is svchost

Discussion in 'other security issues & news' started by melissa_5641, Jul 9, 2005.

Thread Status:
Not open for further replies.
  1. melissa_5641

    melissa_5641 Guest

    i have currently upgraded from win98se to win xp pro there three svchost

    in the task manager and zone alarm is alerting that svchost is trying to

    connect to the internet what should i do ?
     
  2. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    In Windows XP you have services running from dynamic-link libraries (DLLs). At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. And as you saw, there can indeed be multiple instances of Svchost.exe running at the same time.

    Here's some reading: A Description of Svchost.exe in Windows XP (Q314056)

    It's perfectly OK to let it connect.
     
  3. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    4,020
    Location:
    California
    By default, WinXP uses svchost to connect out:

    1) IGMP protocol to MCAST.NET - which allows internet hosts to participate in multicasting.

    2) UDP protocol via port 1900 - Universal Plug N' Play (UPnP)

    3) UDP protocol - time.windows.com for clock regulation


    ZoneAlarm is just alerting you to these outbound connections.

    -rich
    ________________
    ~~Be ALERT!!! ~~
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.