i probably think this subject is not a trojan because it come from mircosoft.公仔箱論壇2 k; N1 G8 N( X/ X/ X" Y
but trojan will always follow this svchost file into your system32 through inbound connection.finally,i use firewall to block this activities(svchost).