svchost 5.1.2600.0 (xpclient.010817-1148)

[John Swift]

Can you tell me the purpose of this generic host
process?
"svchost 5.1.2600.0 (xpclient.010817-1148)"

Looking for source of "sent-received" packet leakage. No
spyware, no virus detected. No programs are open or loaded
in use, but there is data being exchanged through the
router-cable modem. All ports are stealth, no ping through.
This now occurs even when all programs do not load at
startup!

The above sychost is loaded in ZoneAlarm.

Thanks,
John Swift

 

[Rick \Nutcase\ Rogers]

Hi John,

It's a normal system process, and seeing several of them simultaneously is
also normal:

A description of Svchost.exe in Windows XP
http://support.microsoft.com/?kbid=314056

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

 

[Al Smith]

Can you tell me the purpose of this generic host

process?
"svchost 5.1.2600.0 (xpclient.010817-1148)"

Looking for source of "sent-received" packet leakage. No
spyware, no virus detected. No programs are open or loaded
in use, but there is data being exchanged through the
router-cable modem. All ports are stealth, no ping through.
This now occurs even when all programs do not load at
startup!

The above sychost is loaded in ZoneAlarm.

Thanks,
John Swift

I don't know what it is, or why it's there, or why Microsoft felt
the need for it, but you can't browse the Internet without it --
at least, I can't. In ZoneAlarm you can either set ZA at install
to automatically accept this particular version of svchost (this
bugger has numerous incarnations), or you can set it to manual, at
which point you will have to approve svchost yourself before you
can download Web pages for reading in your browser. It isn't
necessary to have it approved in order to connect to the Internet,
but it is necessary to view content in a browser, or so I've found.