Unwanted Program

[Gary Tubesing]

My McAfee AV and my Zone-Alarm Pro Firewall keep
identifying the following as an unwanted program. McAfee
won't allow me to remove or clean it; and Zone-Alarm wants
my permission for it to access the internet. I instruct
McAfee to quarantine it; and, I direct ZA to "deny" it
outward access.

The application is: WINNT\system32\4046\ntdll\svchost.exe

Is this program legit? Or, is it spyware or a possible
Trojan Horse that has embedded itself in my WINNT system?
When McAfee tries to delete it supposedly it cannot be
deleted because it's "in use".

Thanks for any guidance I can obtain.

Gary Tubesing

 

[Dave Patrick]

Svchost.exe is a generic host process name for services that are run from
dynamic-link libraries (DLLs). The Svchost.exe file is located in the
%SystemRoot%\System32 folder. At startup, Svchost.exe checks the services
portion of the registry to construct a list of services that it needs to
load. There can be multiple instances of Svchost.exe running at the same
time. Each Svchost.exe session can contain a grouping of services, so that
separate services can be run depending on how and where Svchost.exe is
started.

Given the path you posted, you may have some trojan present.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect


:
| My McAfee AV and my Zone-Alarm Pro Firewall keep
| identifying the following as an unwanted program. McAfee
| won't allow me to remove or clean it; and Zone-Alarm wants
| my permission for it to access the internet. I instruct
| McAfee to quarantine it; and, I direct ZA to "deny" it
| outward access.
|
| The application is: WINNT\system32\4046\ntdll\svchost.exe
|
| Is this program legit? Or, is it spyware or a possible
| Trojan Horse that has embedded itself in my WINNT system?
| When McAfee tries to delete it supposedly it cannot be
| deleted because it's "in use".
|
| Thanks for any guidance I can obtain.
|
| Gary Tubesing