svchost.exe:456 w2k Web server is this trouble?

Discussion in 'malware problems & news' started by Austin, Sep 13, 2004.

Thread Status:
Not open for further replies.
  1. Austin

    Austin Registered Member

    Jul 11, 2004
    I am using TCPView from on my WIn2k server.
    This machine is not behind any firewall and serves up web sites colocated on the internet.

    I don't notice anything strange and nod32 says everythign is clean on this machine but tcpView reports connections to
    Process svchost.exe:456
    Protocoll TCP
    Local address <the colocatoon domain>epmap

    The remote addresses are always dialup addresses and they stay connected for long periods of time.

    Is this a problem?
    What is going on?
Thread Status:
Not open for further replies.