Lately I have been getting a message from my firewall:
"...svhost.exe is trying to connect to aly222.no-ip.org [126.96.36.199] using remote port 1101 [PT2-DISCOVER - PT2-DISCOVER]. Do you want to allow this program to access the network?"
I don't know what it is, so I click "No." My virus program (Avast) doesn't find it harmful.
So, can anyone tell me what svhost.exe is?
I've searched for information about it. Some people on discussion boards seem to confuse svhost with svchost and it's not the same thing (Is it?).
Any help with this question would be appreciated. Thanks.
If you've read the article linked to in Post #2 you now know that more than one SVCHost will be running at any time. To find out if any of yours are doing something suspicious, go Start then Run abnd in the Open box type cmd /k tasklist /svc (including the spaces) then hit Enter. Right click anywhere on teh black form that follows and go to SelectAll then press Enter. That puts all the text into the Clipboard. Open a Reply form here and paste it back using Control and V together.
Somewhere will know which instance is unsafe and advise.