svchost.exe

[Freeman]

What locations are correct for the svchost.exe file?
Since being attacked by Welchia, I'm suspicious that at
least one version is not needed.

 

[Steven L Umbach]

Use something like Fport to find more information on listening ports.
Tlist -s can also help narrow down svchost.exe services. If a process looks
suspicious, do a search for it on Google or sarc. --- Steve

http://support.microsoft.com/?kbid=250320
http://www.ibiblio.org/security/articles/fport.html
http://www.symantec.com/search/

 

[rob]

Your anti-virus program, -you're running one right?- will
weed out the bad ones..
It's normal to see multiple instances of this process
running in windows.
The best way is to just let you antivirus software do its
job.