If you have processes running in the background that are suspect, you should definitely run Stinger and/or a spyware removal tool. A certain number of SVCHOST entries are normal, but there are worms that disguise themselves as SVCHOST.EXE.

Actually Cody, I was going to ask the following:

I have a simple at home network that consists of a Dimension 4300 running WindowsXP (home), an XPS-T700r running Windows 98SE, a Linksys BEFSR41v2 router and internet access from RoadRounner via a Motorola SB4100 modem.

Under LAN Connection Properties (on the XP machine), I have:


Client for Microsoft Windows checked,
File and Print Sharing for Microsoft Networks checked,
QoS listed but unchecked,
Internet Protocol (IP/TCP) checked.

Obviously, I need the IP/TCP enabled. I have a printer on the XP machine that I share with the Win98 machine, so I need the File and Print Sharing.

What exactly does Client for Microsoft Windows do for me? Is my simple home network considered a 'Microsoft Network'? And under 'properties' for this function, what is/is the difference between 'Windows Locator' and 'DCE Cell Directory Service'?

- What exactly does Client for Microsoft Windows do for me?

A quote from documentation on the Microsoft site:

The Client for Microsoft Networks component allows a computer to access resources on a Microsoft network.

The component is installed and enabled by default. You should not need to configure the component unless you are running software from The Open Group, such as Distributed Computing Environment (DCE) server or client kits.

The TCP/IP protocol is bound to this client (much in the same way as the IPX/SPX protocol would be bound to the Client for Netware Networks, if installed). This is normal for all versions of Windows. Disabling this client will result in problems with accessing shared resources on other Windows machines.


- Is my simple home network considered a 'Microsoft Network'?

Yes, especially if all desktop clients are running some variant of Windows.


- And under 'properties' for this function, what is/is the difference between 'Windows Locator' and 'DCE Cell Directory Service'?

A quote from some Oracle documentation:

The DCE Cell Directory Service offers a distributed, replicated repository service for name, address and attributes of objects across the network.

This particular service apparently has to do with the handling of database object names distributed across multiple systems on the network. The Windows Locator service is normal for usage as the name service provider for a standard Microsoft network.

Thanks Cody. Still miss you over in Modems......