2instances svchost on the left app tab?

Discussion in 'LnS English Forum' started by fred22, Sep 12, 2007.

Thread Status:
Not open for further replies.
  1. fred22

    fred22 Registered Member

    Joined:
    Dec 6, 2004
    Posts:
    229
    hey frederic or anyone else ;),

    first of the 2.06 is great firewall never had problems before
    yesterday i runned some tool and for some reason it messup up my whole c drive, anyway i reformatted(after 2years :D ) and reinstalled xp pro sp2/all hotfixes updated
    installed
    lns
    nod32
    avg antispyware
    trojanhunter
    spywareblaster
    spybot s&d
    winrar
    tor/privoxy
    peerguardian and flashfxp

    when i checked lns application filtering tab it shows 2x svchost on the left, 1 is in the list on the right
    portexplorer shows normal svchost's(4,5) and ll connected to my ISP DNS and 127.0.0.1
    i runned TH for trojans,nothing came up, btw its fresh install and installed lns first whitout cable connected

    anyway im using lns 2.06 final on xp pro sp2
    what could it be?

    thx :)
     

    Attached Files:

  2. Climenole

    Climenole Look 'n' Stop Expert

    Joined:
    Jun 3, 2005
    Posts:
    1,640
    Hi fred22 :)

    Yes, there is many instances of svchost running in your PC
    and
    it's possible also to have two instances connected to Internet...

    May be some unneeded services are running too...

    Some hints for svchost (on W xp):

    There are 7 varieties of svchost:
    C:\WINDOWS\System32\svchost.exe -k rpcss
    C:\WINDOWS\System32\svchost.exe -k DCOMLaunch
    C:\WINDOWS\System32\svchost.exe -k netsvcs
    C:\WINDOWS\System32\svchost.exe -k LocalService
    C:\WINDOWS\System32\svchost.exe -k NetworkService
    C:\WINDOWS\System32\svchost.exe -k HTTPFilter
    C:\WINDOWS\System32\svchost.exe -k imgsvc


    Those ones are mandatory !
    C:\WINDOWS\system32\svchost.exe -k DcomLaunch
    C:\WINDOWS\system32\svchost.exe -k rpcss
    C:\WINDOWS\System32\svchost.exe -k netsvcs

    Then
    C:\WINDOWS\system32\svchost -k HTTPFilter
    correspond to the service HTTP SSL :
    a security filter for http.


    and :

    C:\WINDOWS\system32\svchost -k LocalService
    correspond to services such as WebClient
    and other services useless for a standalone PC.

    C:\WINDOWS\system32\svchost -k Network Service
    correspond to network services useless for a standalone PC such as Client DNS

    C:\WINDOWS\System32\svchost.exe -k imgsvc
    correspond to Windows Image Acquisition (WIA)
    Usefull if you have a scanner for example...

    May be the SSDP service listening on port 1900 in UDP
    or Windows Clock listening on port 123 in UDP...

    Check with TCPView and Process Explorer (on TechNet / Sysinternal web site)


    :)
     
  3. fred22

    fred22 Registered Member

    Joined:
    Dec 6, 2004
    Posts:
    229
    aha yep thats it, u the man :D ;), 2 years is long ;)
    i must have missed some :D


    webclient
    dns client
    wia

    did the trick
    now im seeing 1 instance on the left

    heh, mistery solved :D
    thx! :)
     
Thread Status:
Not open for further replies.