2instances svchost on the left app tab?

hey frederic or anyone else ,

first of the 2.06 is great firewall never had problems before
yesterday i runned some tool and for some reason it messup up my whole c drive, anyway i reformatted(after 2years ) and reinstalled xp pro sp2/all hotfixes updated
installed
lns
nod32
avg antispyware
trojanhunter
spywareblaster
spybot s&d
winrar
tor/privoxy
peerguardian and flashfxp

when i checked lns application filtering tab it shows 2x svchost on the left, 1 is in the list on the right
portexplorer shows normal svchost's(4,5) and ll connected to my ISP DNS and 127.0.0.1
i runned TH for trojans,nothing came up, btw its fresh install and installed lns first whitout cable connected

anyway im using lns 2.06 final on xp pro sp2
what could it be?

thx

 

Hi fred22

Yes, there is many instances of svchost running in your PC
and
it's possible also to have two instances connected to Internet...

May be some unneeded services are running too...

Some hints for svchost (on W xp):

There are 7 varieties of svchost:
C:\WINDOWS\System32\svchost.exe -k rpcss
C:\WINDOWS\System32\svchost.exe -k DCOMLaunch
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\System32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k NetworkService
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\System32\svchost.exe -k imgsvc


Those ones are mandatory !
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs

Then
C:\WINDOWS\system32\svchost -k HTTPFilter
correspond to the service HTTP SSL :
a security filter for http.


and :

C:\WINDOWS\system32\svchost -k LocalService
correspond to services such as WebClient
and other services useless for a standalone PC.

C:\WINDOWS\system32\svchost -k Network Service
correspond to network services useless for a standalone PC such as Client DNS

C:\WINDOWS\System32\svchost.exe -k imgsvc
correspond to Windows Image Acquisition (WIA)
Usefull if you have a scanner for example...

May be the SSDP service listening on port 1900 in UDP
or Windows Clock listening on port 123 in UDP...

Check with TCPView and Process Explorer (on TechNet / Sysinternal web site)

 

aha yep thats it, u the man , 2 years is long
i must have missed some


webclient
dns client
wia

did the trick
now im seeing 1 instance on the left

heh, mistery solved
thx!