!!! svchost.exe setting off my firewall
Hey folks...recelty my firewall has been giving me alerts about the svchost.exe . Now i know this is a windows service that need to be ran but this one is poping up a bit offten, usually when im broswing the net. Its actually comming from and outside source, the IP addresses are 206.47.244.51 and 206.47.244.110.
I did a whois look up and its Bell, my ISP, but Im not sure if its just tracing it back to them and dropping. I ran a tracert command and it doesnt go past my own IP address
Tracing route to nscsim08.bellnexxia.net [206.47.244.51]
over a maximum of 30 hops:
1 9 ms 8 ms 12 ms 64.230.197.232
2 * * * Request timed out.
3 * * * Request timed out.
4 * * * Request timed out.
5 * * * Request timed out.
6 * * * Request timed out.
this is from the log in my firewall
Description Generic Host Process for Win32 Services requested permission to access the internet.
Rating High
Date / Time 2008/09/06 18:26:02-4:00 GMT
Type Repeat Server Program
Program C:\WINDOWS\system32\svchost.exe
Source IP 206.47.244.110:53
Destination IP
Direction Incoming (accept)
Action Taken Blocked (once)
Count 1
Source DNS nsccan10.bellnexxia.net
Destination DNS
Description Generic Host Process for Win32 Services requested permission to access the internet.
Rating High
Date / Time 2008/09/06 18:35:36-4:00 GMT
Type Repeat Server Program
Program C:\WINDOWS\system32\svchost.exe
Source IP 206.47.244.51:53
Destination IP
Direction Incoming (accept)
Action Taken Blocked (once)
Count 1
Source DNS nscsim07.bellnexxia.net
Destination DNS
for now i've bin manually denying it since i know this file can be mascara ding as a virus.
but my scans show now malicious software
CompTIA A+ Certified
MCTS - Microsoft Certified Technical Specialist - Server Virtualization
MCSA - Microsoft Certified System Administrator - Messaging
It wasn't me!...........okay it was but you have no right to assume!!