Repeated inbound to access svchost.exe

That's because it wants to look useful so you'll buy the upgrades.

The headers of your post show your IP address as 82.35.73.70 This is not an issue it just means that replacing it with xx doesn't hide it.

Reassuring but potentially untrue if the virus was written yesterday.

I'd remove it if I were you and get yourself an external piece of hardware to block this kind of thing. For example

See above. Since you don't understand what your firewall is doing it's likely that a tool such as this

Jason

Hi,

Thanks, I didn't realize this.

Exactly.

I already have AVG and use Norton Anti Virus (also installed yesterday). I'll consider buying something like the hardware you recommended.

I run 2 different bits of anti adware / spyware / etc software regulary. I've also often used web sites that 'check your security', though not hijackthis.de -- it that a particulary good one?

I do understand what my firewall is doing in general terms, but not specifically about whether I should allow access to svchost.exe. I know that svchost.exe somehow manages internet connections but don't know whether it needs to receive data initiated in this way. My instinct is that it doesn't, but I'd like confirmation from the pros here.

Thanks,

MS

Incoming connection requests from the Internet have no business in your computer unless you know why they are needed and can configure an external box for port forwarding. Otherwise they should all be rejected. It does not matter whether the destination is svchost or anything else.

Jason

Many thanks Jason. This clarifys things.

Cheers,

MS