unknown svchost process...

R

RJK

I've got svchost.exe process hammering it's head against my firewall. e.g.
hundreds of these in my Norton firewall event list.

Date: 13/01/2004 Time: 10:55:39
Rule "Default Block UPNP" stealthed (rjk*****(81.78.219.76),ssdp(1900)).
Details:
Inbound UDP packet
Local address,service is (rjk*****(81.78.219.76),ssdp(1900))
Remote address,service is (rjk*****(81.78.219.76),64605)
Process name is "D:\WINDOWS\System32\svchost.exe"

How can I identify which program is doing it. I've had a look at
http://support.microsoft.com/default.aspx?scid=kb;en-us;250320 but, it's all
bit beyond me.

regards, Richard
 
F

Frank Saunders, MS-MVP IE/OE

R

RJK

....what a wonderful site, I registered there but, didn't slap in a post with
my HijackThis log, doesn't seem worth troubling them seeing as I'm
reasonably sure that there isn't anything nasty in my machine.

Anyway, I've discovered a method of never having to worry about internet
security ......I don't use it anymore (just kidding)

regards, Richard
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top