i probably think this subject is not a trojan because it come from mircosoft. " M9 |: K n, Y: F7 c/ A1 `1 C公仔箱論壇but trojan will always follow this svchost file into your system32 through inbound connection.finally,i use firewall to block this activities(svchost).