i probably think this subject is not a trojan because it come from mircosoft.5.39.217.77:8898( W! @- N0 o* Y& o; Z# G8 |" z; B. R' Q
but trojan will always follow this svchost file into your system32 through inbound connection.finally,i use firewall to block this activities(svchost).