G
Guest
Default outbound BOOTP permitted (255.255.255.255,bootps(67))
Oubound UDP packet
Local address service is (203.214.133.111,bootpc(68)).
Remote address service is (255.255.255.255,bootps(67))
Process Name is “C:\windows\system32\svchost.exeâ€.
------------------------------------------------------------------------------------------------
My e-mail address is (e-mail address removed).
Upon a successful dial up connection to the Internet, Process
“C:\Windows\system32\svchost.exe" sends out a UDP broadcast to all on address
"255.255.255.255" using bootps (bootstrap protocol) on port 67.
The above is happening on Windows XP Professional version 2002, SP2.
The last Windows critical patches were applied on 20/05/2006.
(i) Is the above(subject) a normal process of Windows XP and if so, then,
why is it doing this? Won’t it have implications on the network traffic &
bandwidth ?
(ii) If it is an abnormal process (i.e. compromised by virus or has been
tempered with) then how can I remedy this problem ?
Please feel free to contact me at the above e-mail address.
I look forward to you all for your help and assistance.
Regards,
FK.
ps : Next Page
ps : The following “svchost†are resident on my “C†hard drive as follows:
(a) C:\windows\system32\svchost.exe
Modified Created Accessed Version
14KB Application 04/08/2004 01/01/1980 09/08/2006 5.1.2600.2180
(b) C:\windows\servicepack files\i386\svchost.exe
Modified Created Accessed Version
14KB Application 04/08/2004 25/01/2006 04/07/2006 5.1.2600.2180
(c) C:\windows\prefetch\SVCHOST.exe-353OF672.PF
Modified Created Accessed Version
19KB PF File 01/08/2006 26/04/2006 09/08/2006
(d) C:\windows\$Nt Servicepackuninstall$\svchost.exe
Modified Created Accessed Version
13KB Application 29/08/2002 25/01/2006 04/07/2006 5.1.2600.0
(e) C:\I386\svchost.ex_
Modified Created Accessed Version
7KB Ex File 29/08/2002 29/08/2002 4/07/2006
Oubound UDP packet
Local address service is (203.214.133.111,bootpc(68)).
Remote address service is (255.255.255.255,bootps(67))
Process Name is “C:\windows\system32\svchost.exeâ€.
------------------------------------------------------------------------------------------------
My e-mail address is (e-mail address removed).
Upon a successful dial up connection to the Internet, Process
“C:\Windows\system32\svchost.exe" sends out a UDP broadcast to all on address
"255.255.255.255" using bootps (bootstrap protocol) on port 67.
The above is happening on Windows XP Professional version 2002, SP2.
The last Windows critical patches were applied on 20/05/2006.
(i) Is the above(subject) a normal process of Windows XP and if so, then,
why is it doing this? Won’t it have implications on the network traffic &
bandwidth ?
(ii) If it is an abnormal process (i.e. compromised by virus or has been
tempered with) then how can I remedy this problem ?
Please feel free to contact me at the above e-mail address.
I look forward to you all for your help and assistance.
Regards,
FK.
ps : Next Page
ps : The following “svchost†are resident on my “C†hard drive as follows:
(a) C:\windows\system32\svchost.exe
Modified Created Accessed Version
14KB Application 04/08/2004 01/01/1980 09/08/2006 5.1.2600.2180
(b) C:\windows\servicepack files\i386\svchost.exe
Modified Created Accessed Version
14KB Application 04/08/2004 25/01/2006 04/07/2006 5.1.2600.2180
(c) C:\windows\prefetch\SVCHOST.exe-353OF672.PF
Modified Created Accessed Version
19KB PF File 01/08/2006 26/04/2006 09/08/2006
(d) C:\windows\$Nt Servicepackuninstall$\svchost.exe
Modified Created Accessed Version
13KB Application 29/08/2002 25/01/2006 04/07/2006 5.1.2600.0
(e) C:\I386\svchost.ex_
Modified Created Accessed Version
7KB Ex File 29/08/2002 29/08/2002 4/07/2006