   Do I Have a Trojan?
  My computer has some really weird behaviour, I have this tool called DU-Meter, it tells me the amount of uploading/ downloading the pc is doing.Recently when I start the computer I have a huge amount of uploading, arround 30Kb/s, and a SVCHost.exe process taht consumes arround 15MB.For a second there i thought it might be windows update, but this is upload, not download...When I kill that process, the upload stops immediatly, but after something like 40 seconds, the task bar resizes, i lose the normal windows xp skins, and it looks like windows 2000, and i also lose sound....Has anyone had this? Where can I find a site to help me out? Its dificult to google for these symptoms, there are too many Trojans I guess.....Thanks for the support... [Hugo Ferreira][Positronic Dreams][Colibri 3D Engine][Entropy HL2 MOD]    [Yann  L.][Enginuity]  [Penny Arcade]  [MSDN][VS  RoadMap][Humus][BSPs][UGP][NeHe]"I say we take off and nuke the entire site from orbit. It''s the only way to be sure." 
  I don''t know, but computing.net is a great forum site for technical help. ;  I had the same problem. Everybody does.Yes, you have a worm.. the Blaster Worm specifically. On the Microsoft website, under downloads, you can find the solution. It's one of the top 10 even, I think. Perhaps in the top 5. It's called Win2000 security patch/update or perhaps SVCHost patch.. something along those lines. It specifies Windows 2000, I do know that. You'll see the security update and know what it is I'm sure. Download it. Run it.It works fine for me now.Here you go.. [edited by - khaos on February 4, 2004 6:58:44 AM];  I''m on an XP Station and I checked the processes - I have 4  instances of svchost.exe running over different services... since I''m runnning XP too, I would assume that it is a system process...The real question is.. why is it taking up so many resources and what is it uploading?   Yes... VB6 is here to steal your minds. Very slowly. ;  The link should fix both of your problems. ;  run it, didnt work... disabled zone alarm, and the same svchost.exe process still uploads at 30Kb/s.....Again, after disabling it, lost sound and windowsXP''s style was lost, reverting to a w2k-looking style (or no style...):''( ;  yea i had that problem a while back - apparently that svchost thingy is the theme process :|  cant remember how i fixed it tho o_O ;  OMGGGGGGGGGGGG TIM WE MISS YUO!!!!!!!!!! ;  aparently it can self-restart, cause when i kill the svchost process, after a while a new one comes up which consumes a lot of resources too...any ideas Tim Cowley?   [Hugo Ferreira][Positronic Dreams][Colibri 3D Engine][Entropy HL2 MOD]    [Yann  L.][Enginuity]  [Penny Arcade]  [MSDN][VS  RoadMap][Humus][BSPs][UGP][NeHe]"I say we take off and nuke the entire site from orbit. It''s the only way to be sure." ;  SVCHost is the ''service host'' process - it provides different execution environments for services (so they can run with different privelidge levels, etc). Most services run through one or more of them (if you check, you probably have multiple listings for it).I''ve no idea if it is Blaster or not, but here''s the Symantec page on it. They have a tool for removing the worm, though as someone already said you need to pick up the patch for windows as well. 