Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

svchost UDP out


  • Please log in to reply
3 replies to this topic

#1 Darktune

Darktune

    Very Purple


  • Members
  • 1,139 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Wales
  • Local time:05:39 AM

Posted 20 July 2013 - 05:40 AM

Hey guys.

 

I was just wondering what this is,

 

I had a pop up from Comodo stating that svchost.exe was requesting permission to access the network i will post the details in table form of what i can see in my view logs.

 

Application: C:\Windows\System32\svchost.exe

Action: Asked (then i blocked it)

Target: In

Protocol: UDP

Source IP: 192.168.0.16

Source Port: 64921

Destination IP: 192.168.0.11

Destination Port: 50194

 

 

What is this? I understand that the IP is a home network IP but no idea where it has come from, also I cannot access my routers settings on my PC anymore. The Ports i know are private ports but no idea what they are. any help would be great thanks.

 

Laptop is a HP Pavilion G Series.

 

Windows 7.


It's very hard to imagine all the crazy things that things really are like. 

Electrons act like waves.. no they don't exactly, they act like particles.. no they don't exactly.

Words and ideas can change the world.


BC AdBot (Login to Remove)

 


#2 GodfatherKing

GodfatherKing

  • Members
  • 587 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:39 AM

Posted 20 July 2013 - 05:55 AM

Both ip addresses are from your private home network. It looks like Computer A (192.168.0.16) has traffic with Computer B (192.168.0.11). Are there more computers or portables then one computer connect to your network? 

What's the exact issue with no access to your router settings? You can't access your router with browser to the routers gateway?

 

Did you set a router password? Or was password of the router default?


Edited by GodfatherKing, 20 July 2013 - 05:55 AM.

If you have received help from me and I don't have respond to you for almost >= 3 days, send me a Private Message.  :hello:


#3 Darktune

Darktune

    Very Purple

  • Topic Starter

  • Members
  • 1,139 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Wales
  • Local time:05:39 AM

Posted 20 July 2013 - 05:59 AM

Well I'm not sure if this is what it is, but at the exact time of the pop up being enabled my stepdad had set up his Xbox up on our network. I'm not sure if his Xbox was the source of the IP. 

 

I typed in our routers IP address (the one i usually type in to access it) and it just times out. Although this may be a result of me blocking the network IP.

 

Craig


It's very hard to imagine all the crazy things that things really are like. 

Electrons act like waves.. no they don't exactly, they act like particles.. no they don't exactly.

Words and ideas can change the world.


#4 GodfatherKing

GodfatherKing

  • Members
  • 587 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:39 AM

Posted 20 July 2013 - 06:15 AM

It's strange you have no access anymore to the router, just to be sure to rule out malware on that computer. You can have a online scan with ESET online scanner.

 

ESET Online Scanner
==================

Note: If your AV/Firewall is blocking Eset online scanner, please temporarily disable your AV/Firewall.

 

I'd like us to scan your machine with ESET OnlineScan This process may may take several hours, that is normal.

  • Hold down Control and click on this link to open ESET OnlineScan in a new window.
  • Click the esetonlinebtn.png button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the icon on your desktop.
  • Check "YES, I accept the Terms of Use."
  • Click the Start button.
  • Accept any security warnings from your browser.
  • Under scan settings, check "Scan Archives" and » UNCHECK "Remove found threats" <== Important
  • Click Advanced settings and select the following:
    • Scan potentially unwanted applications
    • Scan for potentially unsafe applications
    • Enable Anti-Stealth technology
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, click List Threats
  • Copy and paste the information in your next reply. (If no malware was found you will not be presented with a log).
  • Click the Back button.
  • Click the Finish button.

===================================================

 


If you have received help from me and I don't have respond to you for almost >= 3 days, send me a Private Message.  :hello:





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users