Wtf Svchost.exe Has Gone Mad


Steve-O

Well-Known Member
Joined
Aug 28, 2003
Messages
4,054
My Firewall is getting pissed of with svchost.exe anyone know why??

heres a little bit of the log and theres ALOT more than that (About 10 Blocks of svchost.exe Every minute) Only thing Ive deleted out of the Log is my IP Address -

06/18/2004 10:43:34 Active Response Major Incoming None 81.86.130.206 01-00-20-00-01-00 00-00-01-00-00-00 Steve-O STE Normal 1 06/18/2004 10:43:34 06/18/2004

10:43:34
06/18/2004 10:43:33 Intrusion Detection System Critical Incoming TCP 81.86.130.206 01-00-20-00-01-00 00-00-01-00-00-00 svchost.exe Steve-O STE Normal 1 06/18/2004

10:43:33 06/18/2004 10:43:33
06/18/2004 10:40:53 Active Response Major Incoming None 81.86.169.216 01-00-20-00-01-00 00-00-01-00-00-00 Steve-O STE Normal 1 06/18/2004 10:40:53 06/18/2004

10:40:53
06/18/2004 10:40:52 Intrusion Detection System Critical Incoming TCP 81.86.169.216 01-00-20-00-01-00 00-00-01-00-00-00 svchost.exe Steve-O STE Normal 1 06/18/2004

10:40:52 06/18/2004 10:40:52
06/18/2004 10:39:22 Active Response Major Incoming None 81.86.148.37 01-00-20-00-01-00 00-00-01-00-00-00 Steve-O STE Normal 1 06/18/2004 10:39:22 06/18/2004

10:39:22
06/18/2004 10:39:22 Intrusion Detection System Critical Incoming TCP 81.86.148.37 01-00-20-00-01-00 00-00-01-00-00-00 svchost.exe Steve-O STE Normal 1 06/18/2004

10:39:22 06/18/2004 10:39:22
06/18/2004 10:38:00 Active Response Major Incoming None 81.84.132.153 01-00-20-00-01-00 00-00-01-00-00-00 Steve-O STE Normal 1 06/18/2004 10:38:00 06/18/2004

10:38:00
06/18/2004 10:37:59 Intrusion Detection System Critical Incoming TCP 81.84.132.153 01-00-20-00-01-00 00-00-01-00-00-00 svchost.exe Steve-O STE Normal 1 06/18/2004 10:37:59 06/18/2004 10:37:59
06/18/2004 10:37:55 Active Response Major Incoming None 81.86.251.202 01-00-20-00-01-00 00-00-01-00-00-00 Steve-O STE Normal 1 06/18/2004 10:37:55 06/18/2004

10:37:55
06/18/2004 10:37:55 Intrusion Detection System Critical Incoming TCP 81.86.251.202 01-00-20-00-01-00 00-00-01-00-00-00 svchost.exe Steve-O STE Normal 1 06/18/2004
 
Ok.. I just noticed that The Windows XP firewall was off so I re-enabled it and now it seems to have stopped...
 
It might be a worm. I have been having probs with svchost crashing and then copy and paste not working until I reboot. I did a search for the problem and found loads of mentions of some worm or other.

The solution seems to be to download a load of updates from microsoft... as per usual...

J(ohn)
 
Back
Top