Author Topic: IP and svchost  (Read 2726 times)

0 Members and 1 Guest are viewing this topic.

avastreally?

  • Guest
IP and svchost
« on: November 01, 2013, 04:38:54 PM »
I found this IP interacting with svchost.exe and its not related to windows update etc

why would a telecommunication network in europe be doing with svchost? seem malicious
http://en.wikipedia.org/wiki/SITA
« Last Edit: November 04, 2013, 09:18:05 PM by avastreally? »

Offline Para-Noid

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6700
  • Trust only what you test yourself!
Re: IP and svchost
« Reply #1 on: November 01, 2013, 08:24:05 PM »
This is something you should ask on the Comodo forums.
Which "svc" host are you talking about?
Dell Inspiron, Win10x64--HP Envy Win10x64--Both systems Avast Free v17.9.2322, Comodo Firewall v8.2 w/D+, MalwareBytes v3.0, OpenDNS, Super Anti-Spyware, Spyware Blaster, MCShield, Unchecky, Vivaldi Browser and, various browser security tools.

"Look before you leap!" Use online scanners before you click on any link.

avastreally?

  • Guest
Re: IP and svchost
« Reply #2 on: November 02, 2013, 02:41:42 PM »
This is something you should ask on the Comodo forums.
Which "svc" host are you talking about?
svchost.exe in the system32 folder of windows
pic show the ip is interacting with it , ive already blocked it, i never let external ip connect with svchost , thats one way people hack into your computer or infect the process
ill bring it to comodo
thanks

avastreally?

  • Guest
Re: IP and svchost
« Reply #3 on: November 23, 2013, 08:50:37 AM »
BUMP for future reference

From what i gathered, these IP (when checked) are related to the Microsoft Customer Experience Program and usually run through port 3544 (teredo ipv6 related) and is used to collect information abut your computer and hardware anonymously (NSA much  ;D), this feature can be turned off btw
but then again this can be the work of IP spoofing
http://www.webopedia.com/TERM/I/IP_spoofing.html
« Last Edit: November 23, 2013, 12:41:26 PM by avastreally? »