svchost.exe

[jwl]

Using Windows firewalls makes you paranoid. I've configured my Windows
firewall with the following rules

localhost:*<-->*:53 Permit
localhost:*<-->*:80 Permit
localhost:*<-->localhost:* Permit
localhost:*<-->*:* Deny

I only need a browser and Firefox works like a charm. However, the log is
awash with references to svchost.exe. What is svchost.exe and why is half
the Internet trying to talk to it on ports 1025 and 1026? More
importantly, why is svchost.exe constantly trying to connect to
239.255.255.250:1900?

[john@localhost john]$ whois 239.255.255.250
No whois server is known for this kind of object.

Many thanks,
jwl

 

[Ken Wickes [MSFT]]

The 239.255.255.250:1900 thing is probably this

The Internet Gateway Device Discovery and Control Client Is an Optional
Networking Component in Windows XP Professional Service Pack 1a (SP1a)
http://support.microsoft.com/?id=821980