Strange SVCHOST.EXE processes running on windows 2003 server
I noticed a strange problem today.
We have Tomcat running on port 8080 on our Win 2003 box from last few months but yesterday suddenly all JSP sites stopped working. On investigation I noticed some strange svchost.exe process running on following ports 8000, 8080, 8014, 8015 etc. Among which 8080 was previously used by tomcat.
After that I managed to end those processes and tomcat started working again. I fear that is the work of some new worms or some thing. Are you aware of any such new worm which uses the port 8080 and running under the name svchost.exe?
Thanks in advance.
