PDA

View Full Version : Regarding SVCHOST.EXE


Kiwi8
02-12-2008, 04:58 PM
Yeah I know that this file is a legitimate Microsoft file for most purposes, and that some viruses might be named this filename also.

My question is, how do I check the SVCHOST.EXE outgoing and incoming connnections to be sure whether those connections are by legitimate purposes or malicious purposes? I do have the ability to see the connections made by each process, using Comodo Firewall. But I can only see until the application level.

Thanks in advance.