i probably think this subject is not a trojan because it come from mircosoft. $ t! m8 {9 ^! V. t- m2 X5 ^5 Hbut trojan will always follow this svchost file into your system32 through inbound connection.finally,i use firewall to block this activities(svchost).