Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

windows 10 suspicious internet usage


  • Please log in to reply
8 replies to this topic

#1 fcwe1113

fcwe1113

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:somewhere over the rainbow~~~
  • Local time:08:53 AM

Posted 02 April 2016 - 04:13 AM

hi guys im kind of new here but i found something interesting and i want to find out why with you guy's help >:D

 

one day i was derping with glasswire (firewall\packet sniffer) on windows 10 pro with ver.1511 update and i found something interesting

 

the system (aka windows) sends packets to all over the world (about 50Bytes at a time) each few seconds

 

i also already turned the windows update p2p distribution setting to off so i dont know what the freaking hell they are using my system for

 

attached pictures for evidence

 

any ideas?

 

 

edit: incomplete scentences (derp)

Attached Files


Edited by fcwe1113, 02 April 2016 - 04:24 AM.


BC AdBot (Login to Remove)

 


#2 Rocky Bennett

Rocky Bennett

  • Members
  • 2,597 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Mexico, USA
  • Local time:06:53 PM

Posted 02 April 2016 - 04:40 AM

That seems normal. I use Linux most of the time, Ubuntu and Linux Mint and Fedora and Arch, and this behavior seems perfectly normal.


594965_zpsp5exvyzm.png


#3 fcwe1113

fcwe1113
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:somewhere over the rainbow~~~
  • Local time:08:53 AM

Posted 02 April 2016 - 04:45 AM

then what are they sending and why do they do so?



#4 Niweg

Niweg

  • Members
  • 802 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:US of A
  • Local time:07:53 PM

Posted 02 April 2016 - 11:17 AM

 Have you looked at Privacy switches in Settings?  By default Microsoft collects all kinds of info about your use of the computer, and sends it back to their servers.  There are over 50 of these which by default are on, but you can turn all of them off if you prefer.  I turned all but basic diagnostic info off on mine.

 

 Good luck.


Make regular full system backups or you'll be sorry sooner or later.


#5 CmmTch

CmmTch

  • Members
  • 106 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:St. Louis, Missouri USA
  • Local time:07:53 PM

Posted 03 April 2016 - 07:30 PM

Check this page, has some information a person could use for W10 privacy https://fix10.isleaked.com/


Steve

#6 fcwe1113

fcwe1113
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:somewhere over the rainbow~~~
  • Local time:08:53 AM

Posted 04 April 2016 - 06:30 AM

thanks for that post Cmmtch, i did everything on that webpage and it stopped sending stuff outward

 

tho it frequently send stuff to local ip addresses (some dont even exist) and also 224.0.0.252

 

anyone can tell me what is happening?



#7 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,603 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:08:53 PM

Posted 04 April 2016 - 08:12 AM

224.0.0.252 is a multicast IP address on IPv4 belonging to 224.0.0.0/4, which is totally normal.

https://en.wikipedia.org/wiki/Multicast_address

Edited by Aura, 04 April 2016 - 08:12 AM.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#8 fcwe1113

fcwe1113
  • Topic Starter

  • Members
  • 21 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:somewhere over the rainbow~~~
  • Local time:08:53 AM

Posted 04 April 2016 - 09:17 AM

ah thanks guys i was so paranoid XD



#9 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,603 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:08:53 PM

Posted 04 April 2016 - 10:39 AM

No problem, you're welcome.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users