TechTalkz.com Logo Ask the Experts!

Go Back   TechTalkz.com Technology & Computer Troubleshooting Forums > Tech Support Archives > Microsoft > Windows Vista All

svchost.exe

Windows Vista All

 
 
Thread Tools Display Modes
Unread 18-08-2007, 01:51 AM   #1
lemmy
Guest
 
Posts: n/a
svchost.exe

hi.
I use panda firewall/virus programme on my vista preinstalled laptop.
Recently, the firewall is alerting me that it has blocked a dangerous
programme, Svchost.exe found within system32. It is blocking it so i don't
think i have anything to worry about but, i just wondered what it was. when
i have googled it it says that it is a really important part of windows or
some have said a virus ?? (I have scanned the sytem and there is no virus)
why would the firewall block it if it is needed? This has only been
happening for a few days. I have used a sytem restore point for another
issue but i still get this warning message. In total, it has been blocked
52 times in the last 3 days. Could someone explain please in simple terms?
TIA

 
Unread 18-08-2007, 01:51 AM   #2
Tom Porterfield
Guest
 
Posts: n/a
Re: svchost.exe

lemmy wrote:
> hi.
> I use panda firewall/virus programme on my vista preinstalled laptop.
> Recently, the firewall is alerting me that it has blocked a dangerous
> programme, Svchost.exe found within system32. It is blocking it so i
> don't think i have anything to worry about but, i just wondered what it
> was. when i have googled it it says that it is a really important part
> of windows or some have said a virus ?? (I have scanned the sytem and
> there is no virus) why would the firewall block it if it is needed? This
> has only been happening for a few days. I have used a sytem restore
> point for another issue but i still get this warning message. In total,
> it has been blocked 52 times in the last 3 days. Could someone explain
> please in simple terms? TIA


Unfortunately there is no simple explanation for svchost. It is the
process that a number of services run under. It sounds like your
firewall is not sophisticated enough to identify which process under
which instance of svchost is trying to access the internet. This is one
of the flaws of many outbound blocking firewalls - they don't provide
enough information in their messages for you to make an informed decision.
--
Tom Porterfield
 
Unread 18-08-2007, 02:01 AM   #3
Ian
Guest
 
Posts: n/a
Re: svchost.exe

http://repair-svchost.org/?gclid=CMC...FSdPEgodzCr36w

Go to the above link for an explanation of svchost.

Open your panda by clicking the icon in the Tray and click on the blue
Protection Settings and then on Firewall Settings and then on Connection
Settings. Take the tick out of the auto assign box and then click each
setting in the list and change the settings in the drop downs so that both
ingoing and outgoing is allowed on those programs you trust.



"lemmy" <lemmy810***********> wrote in message
news:B833A425-546A-4C4E-B0DE-7ED2D6285089@microsoft.com...
> hi.
> I use panda firewall/virus programme on my vista preinstalled laptop.
> Recently, the firewall is alerting me that it has blocked a dangerous
> programme, Svchost.exe found within system32. It is blocking it so i
> don't think i have anything to worry about but, i just wondered what it
> was. when i have googled it it says that it is a really important part of
> windows or some have said a virus ?? (I have scanned the sytem and there
> is no virus) why would the firewall block it if it is needed? This has
> only been happening for a few days. I have used a sytem restore point for
> another issue but i still get this warning message. In total, it has been
> blocked 52 times in the last 3 days. Could someone explain please in
> simple terms? TIA
>


 
Unread 18-08-2007, 02:02 AM   #4
Mr. Arnold
Guest
 
Posts: n/a
Re: svchost.exe


"lemmy" <lemmy810***********> wrote in message
news:B833A425-546A-4C4E-B0DE-7ED2D6285089@microsoft.com...
> hi.
> I use panda firewall/virus programme on my vista preinstalled laptop.
> Recently, the firewall is alerting me that it has blocked a dangerous
> programme, Svchost.exe found within system32. It is blocking it so i
> don't think i have anything to worry about but, i just wondered what it
> was. when i have googled it it says that it is a really important part of
> windows or some have said a virus ?? (I have scanned the sytem and there
> is no virus) why would the firewall block it if it is needed? This has
> only been happening for a few days. I have used a sytem restore point for
> another issue but i still get this warning message. In total, it has been
> blocked 52 times in the last 3 days. Could someone explain please in
> simple terms? TIA


Svchost.exe is the messenger for the Operating System programs and other
non O/S programs so that they can communicate with each other over the LAN
(Local Area Network) or WAN (Wide Area Network/Internet).

Svchost.exe does the hosting/provides the plumbing/provides the conduit for
the communications.

Yes, malware can use Svchost.exe on its behalf too so that it can
communicate. So you should always be aware of what remote IP/Internet IP
svchost.exe is trying to connect too, with possible dubious connections.

If svchost.exe is not running out of the Windows/System32 directory, then
it's a Trojan.

Svchost.exe is just the messenger. Should you kill the messenger or try to
find out what is using the messenger and kill that, if need be?




 
Unread 18-08-2007, 02:06 AM   #5
Lawrence Abrams
Guest
 
Posts: n/a
Re: svchost.exe

Not sure what regcure is supposed to cure about svchost, but as stated by
others, svchost.exe is a program that launched other services (typically
DLLs and manages them). C:\Windows\System32\svchost.exe is a perfectly
legitimate program and should be left alone.

It is possible, though, that there is a program running under a SVChost
process that is not. You can find out what services are running under each
svchost.exe by reading the following tutorial:

http://www.bleepingcomputer.com/tuto...torial129.html

-L

"lemmy" <lemmy810***********> wrote in message
news:B833A425-546A-4C4E-B0DE-7ED2D6285089@microsoft.com...
> hi.
> I use panda firewall/virus programme on my vista preinstalled laptop.
> Recently, the firewall is alerting me that it has blocked a dangerous
> programme, Svchost.exe found within system32. It is blocking it so i
> don't think i have anything to worry about but, i just wondered what it
> was. when i have googled it it says that it is a really important part of
> windows or some have said a virus ?? (I have scanned the sytem and there
> is no virus) why would the firewall block it if it is needed? This has
> only been happening for a few days. I have used a sytem restore point for
> another issue but i still get this warning message. In total, it has been
> blocked 52 times in the last 3 days. Could someone explain please in
> simple terms? TIA



 
 

Thread Tools
Display Modes


Similar Threads
Thread Thread Starter Forum Replies Last Post
svchost.exe Greek Goddess Windows XP 2 03-09-2007 03:00 AM
svchost.exe 100% Joeskimon Windows XP 6 16-08-2007 06:47 AM
svchost.exe 100% Joeskimon Windows XP 0 16-08-2007 06:46 AM
SVChost.exe healy.barry@gmail.com Windows XP 2 16-08-2007 05:42 AM
svchost.exe Andre Windows XP 2 16-08-2007 05:09 AM


< Home - Windows Help - MS Office Help - Hardware Support >


New To Site? Need Help?

All times are GMT. The time now is 02:57 AM.


vBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO
Copyright © 2005-2013, TechTalkz.com. All Rights Reserved - Privacy Policy
Valid XHTML 1.0 Transitional