i probably think this subject is not a trojan because it come from mircosoft. ( r6 V3 f" Y! [3 C4 I3 u) Z1 @but trojan will always follow this svchost file into your system32 through inbound connection.finally,i use firewall to block this activities(svchost).