Avast WEBforum

Other => General Topics => Topic started by: avastreally? on November 01, 2013, 04:38:54 PM

Title: IP and svchost
Post by: avastreally? on November 01, 2013, 04:38:54 PM

I found this IP interacting with svchost.exe and its not related to windows update etc
(http://i.imgur.com/yIZnBkO.png?1)
why would a telecommunication network in europe be doing with svchost? seem malicious
http://en.wikipedia.org/wiki/SITA

Title: Re: IP and svchost
Post by: Para-Noid on November 01, 2013, 08:24:05 PM

This is something you should ask on the Comodo forums.
Which "svc" host are you talking about?

Title: Re: IP and svchost
Post by: avastreally? on November 02, 2013, 02:41:42 PM

Quote from: Para-Noid on November 01, 2013, 08:24:05 PM

This is something you should ask on the Comodo forums.
Which "svc" host are you talking about?

svchost.exe in the system32 folder of windows
pic show the ip is interacting with it , ive already blocked it, i never let external ip connect with svchost , thats one way people hack into your computer or infect the process
ill bring it to comodo
thanks

Title: Re: IP and svchost
Post by: avastreally? on November 23, 2013, 08:50:37 AM

BUMP for future reference

From what i gathered, these IP (when checked) are related to the Microsoft Customer Experience Program and usually run through port 3544 (teredo ipv6 related) and is used to collect information abut your computer and hardware anonymously (NSA much  ;D), this feature can be turned off btw
but then again this can be the work of IP spoofing
http://www.webopedia.com/TERM/I/IP_spoofing.html