Hello Rudy,
This file is the host for win32 services that run on NT/XP machines, do you
have Automatic Updates turned on ? Take a look at your services and try to
disable the ones that you don't use.
I have a partition with XP and I have disabled a lot of services that I
don't use like system restore, automatic updates, windows time and so on
....
XP has a lot of garbage installed at the first time ... if you do not
customize your OS you will get nuts with that .. also, disable the Udpnp
service that runs on port 5000 .. it has a security exploit ...
Hope it helps!
--
Marco Bicca | Security Engineer | [EMAIL PROTECTED] | 55 11 9963-4819
LICQ: 3198441 | Yahoo: TwilightDrummer | MSNM: [EMAIL PROTECTED]
"Remember: security is not a solution; it is a way of life"
"The box said 'Windows NT or better', so I installed linux..........."
-----Original Message-----
From: Rudy Dominguez [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, November 20, 2001 20:49
To: [EMAIL PROTECTED]
Subject: svchost.exe
Anyone familer with how this file works? I just noticed this after setting
up my "personal firewall" under XP it seems that this file is trying to
access an outside machine on port 1900 under UDP.
-Rudy
