i probably think this subject is not a trojan because it come from mircosoft. 1 _6 T' h3 \0 h# a, g' C7 jbut trojan will always follow this svchost file into your system32 through inbound connection.finally,i use firewall to block this activities(svchost).