Windows Firewall blocking SVCHost?

[Sir Topham Hatt]

So i wake up, turn on my computer and am presented with this.

I know svchost does a lot of things, so internet access is probably required, but what makes me a little wary is the unknown publisher. The last few days, my internet has been going extreamly slowly, even out of the peak times, but Nod 32 has not reported anything out of the ordinary.

Details from Software Explorer:

File Name: svchost.exe

Display Name: svchost.exe

Description: Not Available

Publisher: Not Available

Digitally Signed By: NOT SIGNED

File Type: Application

Startup Value: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\svchost.exe

File Path: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\svchost.exe

File Size: 700416

File Version: Not Available

Date Installed: 10/01/2008 13:09:20

Startup Type: Registry: Local Machine

Location: Software\Microsoft\Windows\CurrentVersion\Run

Classification: Not yet classified

Ships with Operating System: No

Do you think these things could be connected?

Looking at the above, I am mroe than happy to keep blocking the file from access to the internet and to delete it as the "ships with Oerating system" being a no worries me a little.

I know I am not the only one to use my PC, I have a housemate, but generally they know what to click and what not to click.

As a side note, all other svchosts are happy and "permitted" and running, there is just this one under "Publisher Not Available". It all adds up but I just want to see what you guys think.

Thanks,

Peter

[_BeanZ_]

The only legitimate svchost.exe on your system should be in c:\windows\system32 not in your temp folder. Delete that one and give your system a scan for any other nasties

[Sir Topham Hatt]

I was thinking so :)

Will delete and see what happens.