2instances svchost on the left app tab?

Discussion in 'LnS English Forum' started by fred22, Sep 12, 2007.

Thread Status:
Not open for further replies.
  1. fred22

    fred22 Registered Member

    Dec 6, 2004
    hey frederic or anyone else ;),

    first of the 2.06 is great firewall never had problems before
    yesterday i runned some tool and for some reason it messup up my whole c drive, anyway i reformatted(after 2years :D ) and reinstalled xp pro sp2/all hotfixes updated
    avg antispyware
    spybot s&d
    peerguardian and flashfxp

    when i checked lns application filtering tab it shows 2x svchost on the left, 1 is in the list on the right
    portexplorer shows normal svchost's(4,5) and ll connected to my ISP DNS and
    i runned TH for trojans,nothing came up, btw its fresh install and installed lns first whitout cable connected

    anyway im using lns 2.06 final on xp pro sp2
    what could it be?

    thx :)

    Attached Files:

  2. Climenole

    Climenole Look 'n' Stop Expert

    Jun 3, 2005
    Hi fred22 :)

    Yes, there is many instances of svchost running in your PC
    it's possible also to have two instances connected to Internet...

    May be some unneeded services are running too...

    Some hints for svchost (on W xp):

    There are 7 varieties of svchost:
    C:\WINDOWS\System32\svchost.exe -k rpcss
    C:\WINDOWS\System32\svchost.exe -k DCOMLaunch
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\System32\svchost.exe -k LocalService
    C:\WINDOWS\System32\svchost.exe -k NetworkService
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    C:\WINDOWS\System32\svchost.exe -k imgsvc

    Those ones are mandatory !
    C:\WINDOWS\system32\svchost.exe -k DcomLaunch
    C:\WINDOWS\system32\svchost.exe -k rpcss
    C:\WINDOWS\System32\svchost.exe -k netsvcs

    C:\WINDOWS\system32\svchost -k HTTPFilter
    correspond to the service HTTP SSL :
    a security filter for http.

    and :

    C:\WINDOWS\system32\svchost -k LocalService
    correspond to services such as WebClient
    and other services useless for a standalone PC.

    C:\WINDOWS\system32\svchost -k Network Service
    correspond to network services useless for a standalone PC such as Client DNS

    C:\WINDOWS\System32\svchost.exe -k imgsvc
    correspond to Windows Image Acquisition (WIA)
    Usefull if you have a scanner for example...

    May be the SSDP service listening on port 1900 in UDP
    or Windows Clock listening on port 123 in UDP...

    Check with TCPView and Process Explorer (on TechNet / Sysinternal web site)

  3. fred22

    fred22 Registered Member

    Dec 6, 2004
    aha yep thats it, u the man :D ;), 2 years is long ;)
    i must have missed some :D

    dns client

    did the trick
    now im seeing 1 instance on the left

    heh, mistery solved :D
    thx! :)
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.