what is svchost

Discussion in 'other security issues & news' started by melissa_5641, Jul 9, 2005.

Thread Status:
Not open for further replies.
  1. melissa_5641

    melissa_5641 Guest

    i have currently upgraded from win98se to win xp pro there three svchost

    in the task manager and zone alarm is alerting that svchost is trying to

    connect to the internet what should i do ?
  2. TonyKlein

    TonyKlein Security Expert

    Feb 9, 2002
    The Netherlands
    In Windows XP you have services running from dynamic-link libraries (DLLs). At startup, Svchost.exe checks the services portion of the registry to construct a list of services that it needs to load. And as you saw, there can indeed be multiple instances of Svchost.exe running at the same time.

    Here's some reading: A Description of Svchost.exe in Windows XP (Q314056)

    It's perfectly OK to let it connect.
  3. Rmus

    Rmus Exploit Analyst

    Mar 16, 2005
    By default, WinXP uses svchost to connect out:

    1) IGMP protocol to MCAST.NET - which allows internet hosts to participate in multicasting.

    2) UDP protocol via port 1900 - Universal Plug N' Play (UPnP)

    3) UDP protocol - time.windows.com for clock regulation

    ZoneAlarm is just alerting you to these outbound connections.

    ~~Be ALERT!!! ~~
Thread Status:
Not open for further replies.