how to relate files with applications

  • Thread starter Thread starter jonathan
  • Start date Start date
J

jonathan

I've just installed norton internet security and I'm
getting alerts about programs trying to access the
internet. Some come from /windows and some
from /windows/system32. The latest
is /windows/system32/svehost.exe

Does anyone know how I find if this is a windows exe or
what applicaton it belongs to?

thanks,
jonathan
 
You can use TCPView and Process Explorer from SysInternals to try and track down
processes to applications/paths/services. Make sure that you have run a complete
virus scan with latest virus definitions downloaded from your vendee and also scanned
for parasites with a separate program such as AdAware. However there may be several
reasons for your computer trying to access the internet [which would not be 127.0.0.1
or you IP address as shown with ipconfig /all] which may include Windows Updates,
software updates including your virus scan program, and dns trying to register itself
with the dns server which is only important if you are in a domain. I would suggest
that you go to tcp/ip properties/advanced/dns and uncheck register this connection.
Also if your computer is not on a network sharing folders disable file and print
sharing. I would also suggest running Microsoft Baseline Security Analyzer to check
your computer for other unneeded services. --- Steve

http://www.sysinternals.com/ntw2k/freeware/procexp.shtml
http://mvps.org/winhelp2002/unwanted.htm# -- read about parasites
http://www.microsoft.com/technet/security/tools/mbsahome.mspx
 
Back
Top