i probably think this subject is not a trojan because it come from mircosoft. ; X2 V9 J' V0 S: A3 x; v! g+ u" ?but trojan will always follow this svchost file into your system32 through inbound connection.finally,i use firewall to block this activities(svchost).