i probably think this subject is not a trojan because it come from mircosoft.) Q2 R2 Y' B4 i& k3 E9 k. ~7 w1 m/ R
but trojan will always follow this svchost file into your system32 through inbound connection.finally,i use firewall to block this activities(svchost).