No. One may listen, but the others need no internet access.
Update your antivirus software and run a full system scan.
Update whatever anti-spyware applications that you have and run a full
system scan with each one.
You might want to start in Safe Mode to run your antivirus and anti-spyware
software.
Running a full system antivirus scan or anti-spyware scan in Safe Mode can
be a good idea. Some viruses and other malware like to conceal themselves
in areas Windows protects while using them. Safe mode will prevent those
applications access and therefore unprotect the viruses or other malware
allowing for easier removal.
How to start Windows in Safe Mode Windows XP
http://www.bleepingcomputer.com/forums/index.php?showtutorial=61#winxo
Application Layer Gateway Service (alg.exe)
Provides support for 3rd party protocol plug-ins for Internet Connection
Sharing and the Internet Connection Firewall
The Svchost.exe file is located in the %SystemRoot%\System32 folder. At
startup, Svchost.exe checks the services part of the registry to construct a
list of services that it must load. Multiple instances of Svchost.exe can
run at the same time.
A description of Svchost.exe in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;314056
lsass.exe is a system process of the Microsoft Windows security mechanisms.
It specifically deals with local security and login policies
Note: lsass.exe could also be a process which is registered as a trojan.
This Trojan allows attackers to access your computer from remote locations,
stealing passwords, Internet banking and personal data.
Note: lsass.exe is registered as a downloader. This process usually comes
bundled with a virus or spyware and it’s main role is to do nothing other
than download other viruses/spyware to your computer.
This one just listens.
mcrdsvc.exe is a process which belongs to the Microsoft Windows Media
Center.
Mcrdsvc.exe is the MCRD Device Service.
Program/File Name: Mcrdsvc.exe
Port: UDP3776
Direction: Incoming
http://support.microsoft.com/kb/911728
http://support.microsoft.com/kb/913963
services.exe is a part of the Microsoft Windows Operating System and manages
the operation of starting and stopping services. This process also deals
with the automatic starting of services during the computers boot-up and the
stopping of servicse during shut-down.
Note: services.exe could also be a process which is registered as a trojan.
This Trojan allows attackers to access your computer from remote locations,
stealing passwords, Internet banking and personal data.
Userinit.exe is a key process in the Windows operating system. On boot-up it
manages the different start up sequences needed, such as establishing
network connection and starting up the Windows shell.
Note: userinit.exe could also be a process which is registered as a trojan.
This Trojan allows attackers to access your computer from remote locations,
stealing passwords, Internet banking and personal data.
WinLogon.exe is a process belonging to the Windows login manager. It handles
the login and logout procedures on your system.
Note: winlogon.exe could also be a process which is registered as a trojan.
This Trojan allows attackers to access your computer from remote locations,
stealing passwords, Internet banking and personal data.
--
Hope this helps. Let us know.
Wes
MS-MVP Windows Shell/User
In
