svchost.exe taking 6mb bandwidth

[ontheball]

Ive installed a firewall and it shows 2 online apps. mozilla and svchost.exe. svchost is sending 6mb bandwidth to a remote ip udp dns. Im getting around 137kb in firefox. I know svchost is a windows process but its using all my bandwidth.

[General Maximus]

are you sure dude? it should be taking up processor juice more than anything else and only 1% at that

[ntl.wotcha]

I would investigate more closely this "remote ip udp dns". check if it is for real DNS server. sounds to me like it could be a trojan/virus infected.

On the otherhand svchost is often used by other programs so you may have another app running which is using it for connectivity.

[zing_deleted]

hijack this log please

[Stephen]

I think last time I checked there were about 7 svchost.exe running on my Vista machine at the same time.

Shouldn't be using any bandwidth though.

[Jelly]

I seem to remember that Windows Update checks are done by svchost.exe loading a dll.

Do you know what address the data is being sent to?

[smeagoly1]

Like others I have several running, but they never account for more than a few % on CPU usage. At first i was worried as i never knew what svhost was for at the time haha
Do the bog standard virus and malware scans, to see if it will pick anything up though, doesn't do any harm doing that.

[Milambar]

<offtopic> Surely you only have ONE running, but several threads, which look like several copies running? </offtopic>