SNDVOL32.exe, Can this be infected?

I know sndvol32.exe is the actual sound volume executable and its found in the \windows\system32\, but all of a sudden it is now repeatedly trying to open up ports / use other progs that have access to ports to access the net or so my firewall tells says. Is it possible that this file is infected or somehow replaced with a different version even though I haven't installed anything (that I am aware of) ?

I've used avast to scan it but it doesn't find anything, but I guess you can never be sure..

 

Try uploading the file in question to a site that scans suspicious files using several antivirus engines like virus total or Jotti's malware scan.

 

Yeah, I would definitely scan the computer using another program. That is NOT normal behavior for that component. In fact, I basically never see that exe in the process monitor.

 

Any executable can contain virus code. Try McAfee FreeScan and get the opinion of another AV program. It could be that you also just have a new virus that the companies haven't seen before. I believe that most AV companies have places you can submit suspicious files for them to test. There is absolutely no reason for that file to be opening ports on your machine... is there a chance there's another program somewhere else on your hard drive with the same name?

 

I just permanently blocked it, and it still seems to do it (though I killed the notifications). Apparently though, it is not infected, odd.