Re: Unknown svchost.exe DNS port 53 network activity

Re: Unknown svchost.exe DNS port 53 network activity

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Re: Unknown svchost.exe DNS port 53 network activity David H. Lipman 12-20-2006
Posted by Stefan Kanthak on December 22, 2006, 9:54 am
If you were  Registered and logged in, you could reply and use other advanced thread options

>
>
> |
> | The "problem" was back overnight. I'll post more information soon.
> |
> | Raffi
>
>
>
> If you are using any version of Sun Java that is prior to JRE Version 6.0,
> then you are strongly urged to remove any/all versions.
> There are vulnerabilities in them and they are actively being exploited.

Stop spreading FUD!
1.5.0_10 as well as 1.4.2_13 have no known vulnerabilities!

> It is highly suggested that you update to the latest version which is Sun Java
JRE/JSE
> Version 6.0

It's completely sufficient to have the latest version of 1.5.0 or 1.4.2
installed and all previous versions (manually!) removed.
There are still quite some applets and java applications out there which
won't run with JRE6 or even JRE5!

> Simple check, look under...
> C:\Program Files\Java

| dir "C:\Program Files\"
|
| File not found

When will you learn to use "%ProgramFiles%"?

> The only folder under that folder should be the latest version.
>
> Such as...
> C:\Program Files\Java\jre1.6.0
>
> http://java.sun.com/javase/downloads/index.jsp
> http://www.java.com/en/download/manual.jsp
>
> FYI:
> http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1
> http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1
> http://sunsolve.sun.com/search/document.do?assetkey=1-26-102622-1
>
>
> For non-viral malware...
>
> Please download, install and update the following software...

Alun already gave the ONLY CORRECT advice: flatten and rebuild.

Stefan

fup microsoft.public.security


Posted by Gabriele Neukam on December 22, 2006, 11:11 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On this special day, David H. Lipman wrote :

> If you are using any version of Sun Java that is prior to JRE Version 6.0,
> then you are strongly urged to remove any/all versions.

You should replace the six with a nine or ten.

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102729-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102731-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102732-1

are the newest alerts by Sun.


Gabriele Neukam

Gabriele.Spamfighter.Neukam@t-online.de

--
Bei Windows haut man raus was man nicht braucht.
Bei Linux haut man rein was man braucht.
(René 'vollmi' Vollmeier in de.comp.security.misc)



Posted by Tom Willett on December 22, 2006, 2:08 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
The most current version of JRE is now 6.0
https://sdlc6e.sun.com/ECom/EComActionServlet;jsessionid=A740E8BE890BC3FA02F50ACBEE0FC574

| On this special day, David H. Lipman wrote :
|
| > If you are using any version of Sun Java that is prior to JRE Version
6.0,
| > then you are strongly urged to remove any/all versions.
|
| You should replace the six with a nine or ten.
|
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-102729-1
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-102731-1
| http://sunsolve.sun.com/search/document.do?assetkey=1-26-102732-1
|
| are the newest alerts by Sun.
|
|
| Gabriele Neukam
|
| Gabriele.Spamfighter.Neukam@t-online.de
|
| --
| Bei Windows haut man raus was man nicht braucht.
| Bei Linux haut man rein was man braucht.
| (René 'vollmi' Vollmeier in de.comp.security.misc)
|
|



Posted by on December 22, 2006, 3:08 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Tom Willett wrote:
> The most current version of JRE is now 6.0

Here is a very good free online scan from world leaders in security.
It will let you know what needs securing ( updating ) & what needs
removing ( security risk )
Secunia Software Inspector
http://secunia.com/software_inspector


Posted by David H. Lipman on December 22, 2006, 4:25 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

|
| Here is a very good free online scan from world leaders in security.
| It will let you know what needs securing ( updating ) & what needs
| removing ( security risk )
| Secunia Software Inspector
| http://secunia.com/software_inspector

It is very good and it is highly suggested.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Similar ThreadsPosted
Unknown download activity in background - how to determine what it is? July 28, 2007, 3:51 am
my network server has a virus and i can not conect to the network. November 1, 2008, 6:19 pm
svchost.exe virus? January 16, 2007, 5:19 pm
Strange svchost.exe April 23, 2008, 8:54 am
Modified svchost.exe November 9, 2008, 5:46 am
C:\WINDOWS\SYSTEM32\SVCHOST.EXE August 7, 2006, 6:00 pm
Help! Fake svchost.exe on my computer October 6, 2006, 7:27 am
What is C:\WINDOWS\system32\svchost.exe December 8, 2006, 10:03 pm
SMTP Trojan uses SVCHOST on W2K Pro November 4, 2008, 1:23 pm
Port log April 22, 2008, 2:54 am

The site map in XML format XML site map

Contact Us | Privacy Policy