Solved possible Hijack/virus..

B

brooksndun

New Member
Messages
884
I think I have something very fishing going on.

I can browse the internet fine but My firewall keeps popping up to connect to svchost.exe odd ports...

pictures provided.. I've started to run a lot of anti-rootkit/virus programs and it occasionally finds things that I ofcourse fix..

I feel like I've installed something or clicked things that are hijacking my firefox..

the best example I've seen is different home pages when I start firefox up.. and taking long time to connect to websites etc.. slow download speeds.. so I know something is up..

How do I go about defusing the situation with possible hijacking ..

I will eventually probably just reinstall windows clean.. but is there anything I can do now.. I do have a lot of programs installed etc..

securitybreach.JPG



seciruty2.JPG

seciruty3.JPG
 

My Computer

System One

  • OS
    windows 8.1
    Computer type
    Laptop
    System Manufacturer/Model
    Lenovo g750
    CPU
    i5
    Motherboard
    Some Chinese Crap..
    Memory
    8
    Graphics Card(s)
    Nvidia 755
    Antivirus
    Windows Defender
As you can see from my pictures, I have Svchost.exe already allowed by default windows firewall rules..

so why is svchost.exe trying to connect more? I know this is a red flag.. especially the ports its trying to connect to..
 

My Computer

System One

  • OS
    windows 8.1
    Computer type
    Laptop
    System Manufacturer/Model
    Lenovo g750
    CPU
    i5
    Motherboard
    Some Chinese Crap..
    Memory
    8
    Graphics Card(s)
    Nvidia 755
    Antivirus
    Windows Defender
Can be software you have trying to connect, but firewall is blocking it. As you think, yes, a virus can hijack a svchost.exe.
Look here too How to remove SvcHost.exe virus (Malware Removal Guide)
As shown here need open location. Use Task manager.

What exactly did you run to scan ? Added any new extensions or plug-ins to Firefox ? Run Firefox with all disabled or reset it. Should use Adblock plus for Firefox too. Windows Firewall and what else do you use as Anti-Virus? Try Windows Malicious removal tool full scan, MRT.EXE at run. Use Malwarebytes.
 

My Computer

System One

  • OS
    Windows 10 Pro 64bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    CyberPowerPC Gamer Xtreme 1502 (GX1502)
    CPU
    Intel Core i7 5820K 3.30 GHZ 64 bit 6-Core Processor
    Motherboard
    Gigabyte GA-X99-UD3
    Memory
    G.Skill 16GB Quad Channel DDR4-2400MHZ
    Graphics Card(s)
    EVGA GeForce GTX 970 SSC ACX 2.0+ DDR5 4GB
    Sound Card
    Creative Sound Blaster ZxR 5.1
    Monitor(s) Displays
    ASUS PA24Q 24" Pro Art IPS LCD/LED Backlit 1920x1200
    Screen Resolution
    1920x1200 16:10
    Hard Drives
    SAMSUNG 850 EVO 250GB SATA 6Gb/s 2.5" Internal SSD,
    Crucial MX100 512GB SATA 6Gb/s 2.5" Internal SSD,
    WD WD10EZEX-00RKKA0 1TB SATA 6Gb/s 3.5 Internal HDD
    PSU
    EVGA SuperNOVA 750 G2 750W 80 Plus Gold Full Modular
    Case
    AZZA Cosmas Black Gaming Case
    Cooling
    Cool Master Hyper 212 Evo Dual 120mm, ( 2) Noctua PWM 120mm Case Fans (1) Gelid PWM 120mm Blue LED
    Keyboard
    Logitech K800 Illumiated Wireless Keyboard
    Mouse
    Logitech M570 Wireless Trackball
    Internet Speed
    84mbps /94mbps
    Browser
    Mozilla Firefox 41.0.1 / Microsoft Edge/ IE 11
    Antivirus
    Norton Security 2015
    Other Info
    Pioneer BDR-209DBK 16x Blu-Ray Burner, LG 24x Dual Layer DVD Burner,
    StarTech Front Bay 22-in-1 USB 2.0 Internal Multi Media Memory Card Reader,Logitech Z906 5.1 Speaker system
I think I have something very fishing going on. I can browse the internet fine but My firewall keeps popping up to connect to svchost.exe odd ports...
Click to expand...

The ones you posted don't seem abnormal.

- Outbound connection from svchost.exe to 93.184.215.200 Port 80 (EdgeCast)
- Outbound connection from svchost.exe to 184.51.112.80 Port 80 (Akamai)

Akamai and Edgecast are both high-end CDN networks. As they are CDN's, the IP address alone won't tell you anything, and it's not possible to know what svchost is requesting from them without capturing the traffic with something like Wireshark/Microsoft Message Analyzer and looking to see what it's doing exactly. However it's not abnormal to see connections from svchost to these companies and in all likelihood it could just be checking Certificate Revocation Lists.

- Outbound connection from svchost.exe to 224.0.0.252 Port 5355 (LLMNR)

That's for Link Local Multicast Name Resolution, which is normal as well. In all probability it will also make outbound requests to ff02::1:3 Port 5355 too (for LLMNR IPv6).

As you can see from my pictures, I have Svchost.exe already allowed by default windows firewall rules.. so why is svchost.exe trying to connect more?
Click to expand...

From the screenshot you posted, I can't see the details of the rules that you have set for svchost. However it's likely that they're set for different protocols, addresses and ports. For example, your "Core Networking - DNS (U..." rule will be UDP out to Port 53, which is obviously totally different to TCP out to Port 80, etc.

the best example I've seen is different home pages when I start Firefox up.. and taking long time to connect to websites etc.. slow download speeds.. so I know something is up.. How do I go about defusing the situation with possible hijacking ..

I will eventually probably just reinstall windows clean.. but is there anything I can do now.. I do have a lot of programs installed etc..
Click to expand...

If you suspect something isn't right, then you can't go wrong with going down the lines of a clean reinstall of Windows.
 

My Computer

System One

  • OS
    Win 8 64-bit
Nice find and explanation ARC1020. Feel reinstall will probably put these back on unless OP knows reasons why they are there in first place, by what's installed on system now.
 

My Computer

System One

  • OS
    Windows 10 Pro 64bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    CyberPowerPC Gamer Xtreme 1502 (GX1502)
    CPU
    Intel Core i7 5820K 3.30 GHZ 64 bit 6-Core Processor
    Motherboard
    Gigabyte GA-X99-UD3
    Memory
    G.Skill 16GB Quad Channel DDR4-2400MHZ
    Graphics Card(s)
    EVGA GeForce GTX 970 SSC ACX 2.0+ DDR5 4GB
    Sound Card
    Creative Sound Blaster ZxR 5.1
    Monitor(s) Displays
    ASUS PA24Q 24" Pro Art IPS LCD/LED Backlit 1920x1200
    Screen Resolution
    1920x1200 16:10
    Hard Drives
    SAMSUNG 850 EVO 250GB SATA 6Gb/s 2.5" Internal SSD,
    Crucial MX100 512GB SATA 6Gb/s 2.5" Internal SSD,
    WD WD10EZEX-00RKKA0 1TB SATA 6Gb/s 3.5 Internal HDD
    PSU
    EVGA SuperNOVA 750 G2 750W 80 Plus Gold Full Modular
    Case
    AZZA Cosmas Black Gaming Case
    Cooling
    Cool Master Hyper 212 Evo Dual 120mm, ( 2) Noctua PWM 120mm Case Fans (1) Gelid PWM 120mm Blue LED
    Keyboard
    Logitech K800 Illumiated Wireless Keyboard
    Mouse
    Logitech M570 Wireless Trackball
    Internet Speed
    84mbps /94mbps
    Browser
    Mozilla Firefox 41.0.1 / Microsoft Edge/ IE 11
    Antivirus
    Norton Security 2015
    Other Info
    Pioneer BDR-209DBK 16x Blu-Ray Burner, LG 24x Dual Layer DVD Burner,
    StarTech Front Bay 22-in-1 USB 2.0 Internal Multi Media Memory Card Reader,Logitech Z906 5.1 Speaker system
I'll answer more after I eat but really quickly, I have the default windows firewall Rules set for svchost.exe.. so with the "default" windows 8.1 firewall rules why is svchost.exe trying to connect with more ports? that is what disturbs me..

I assume the default windows firewall rules allow all the svchost.exe needs to connect.. so why is there all the sudden more needing my approval?

I'll answer the rest later.. too hungry.. gotta eat.

thanks for replies though..
 

My Computer

System One

  • OS
    windows 8.1
    Computer type
    Laptop
    System Manufacturer/Model
    Lenovo g750
    CPU
    i5
    Motherboard
    Some Chinese Crap..
    Memory
    8
    Graphics Card(s)
    Nvidia 755
    Antivirus
    Windows Defender
Bit above my knowledge of svchosts, but reinstall put back all stuff have now chances it will be back, unless it's something different thne installed software. YW
 

My Computer

System One

  • OS
    Windows 10 Pro 64bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    CyberPowerPC Gamer Xtreme 1502 (GX1502)
    CPU
    Intel Core i7 5820K 3.30 GHZ 64 bit 6-Core Processor
    Motherboard
    Gigabyte GA-X99-UD3
    Memory
    G.Skill 16GB Quad Channel DDR4-2400MHZ
    Graphics Card(s)
    EVGA GeForce GTX 970 SSC ACX 2.0+ DDR5 4GB
    Sound Card
    Creative Sound Blaster ZxR 5.1
    Monitor(s) Displays
    ASUS PA24Q 24" Pro Art IPS LCD/LED Backlit 1920x1200
    Screen Resolution
    1920x1200 16:10
    Hard Drives
    SAMSUNG 850 EVO 250GB SATA 6Gb/s 2.5" Internal SSD,
    Crucial MX100 512GB SATA 6Gb/s 2.5" Internal SSD,
    WD WD10EZEX-00RKKA0 1TB SATA 6Gb/s 3.5 Internal HDD
    PSU
    EVGA SuperNOVA 750 G2 750W 80 Plus Gold Full Modular
    Case
    AZZA Cosmas Black Gaming Case
    Cooling
    Cool Master Hyper 212 Evo Dual 120mm, ( 2) Noctua PWM 120mm Case Fans (1) Gelid PWM 120mm Blue LED
    Keyboard
    Logitech K800 Illumiated Wireless Keyboard
    Mouse
    Logitech M570 Wireless Trackball
    Internet Speed
    84mbps /94mbps
    Browser
    Mozilla Firefox 41.0.1 / Microsoft Edge/ IE 11
    Antivirus
    Norton Security 2015
    Other Info
    Pioneer BDR-209DBK 16x Blu-Ray Burner, LG 24x Dual Layer DVD Burner,
    StarTech Front Bay 22-in-1 USB 2.0 Internal Multi Media Memory Card Reader,Logitech Z906 5.1 Speaker system
ARC1020 said:
I think I have something very fishing going on. I can browse the internet fine but My firewall keeps popping up to connect to svchost.exe odd ports...
Click to expand...

The ones you posted don't seem abnormal.

- Outbound connection from svchost.exe to 93.184.215.200 Port 80 (EdgeCast)
- Outbound connection from svchost.exe to 184.51.112.80 Port 80 (Akamai)

Akamai and Edgecast are both high-end CDN networks. As they are CDN's, the IP address alone won't tell you anything, and it's not possible to know what svchost is requesting from them without capturing the traffic with something like Wireshark/Microsoft Message Analyzer and looking to see what it's doing exactly. However it's not abnormal to see connections from svchost to these companies and in all likelihood it could just be checking Certificate Revocation Lists.

- Outbound connection from svchost.exe to 224.0.0.252 Port 5355 (LLMNR)

That's for Link Local Multicast Name Resolution, which is normal as well. In all probability it will also make outbound requests to ff02::1:3 Port 5355 too (for LLMNR IPv6).

As you can see from my pictures, I have Svchost.exe already allowed by default windows firewall rules.. so why is svchost.exe trying to connect more?
Click to expand...

From the screenshot you posted, I can't see the details of the rules that you have set for svchost. However it's likely that they're set for different protocols, addresses and ports. For example, your "Core Networking - DNS (U..." rule will be UDP out to Port 53, which is obviously totally different to TCP out to Port 80, etc.

the best example I've seen is different home pages when I start Firefox up.. and taking long time to connect to websites etc.. slow download speeds.. so I know something is up.. How do I go about defusing the situation with possible hijacking ..

I will eventually probably just reinstall windows clean.. but is there anything I can do now.. I do have a lot of programs installed etc..
Click to expand...

If you suspect something isn't right, then you can't go wrong with going down the lines of a clean reinstall of Windows.
Click to expand...


Ok well I dont' know if this helps but like I said, I reset windows firewall and then just left "core networking" all "allowed"

I imagine windows knows what svchost.exe connections it needs to allow from the default right?

my point is, Why does svchost.exe need to connect to anything I dont' care what it is on ports like 52390 etc.?

here is my latest try to connect picture..

latest1.JPG


anyway, here is my rules allowed..

seesvchost.JPG
 

My Computer

System One

  • OS
    windows 8.1
    Computer type
    Laptop
    System Manufacturer/Model
    Lenovo g750
    CPU
    i5
    Motherboard
    Some Chinese Crap..
    Memory
    8
    Graphics Card(s)
    Nvidia 755
    Antivirus
    Windows Defender
I also turned off ipv6 and file sharing ect.. Anyway i'm basically wondering why after resetting the default windows firewall - svchost.exe still has connections its trying to make..

So after I reinstall windows clean, am I going to see svchost.exe trying to connect like this ?? and i'm talking before I install any of my programs..

(also to install windows clean, do I need to actually wipe the drive or just a "quick" reformat like windows does when installing..)


turnoff.JPG
 

My Computer

System One

  • OS
    windows 8.1
    Computer type
    Laptop
    System Manufacturer/Model
    Lenovo g750
    CPU
    i5
    Motherboard
    Some Chinese Crap..
    Memory
    8
    Graphics Card(s)
    Nvidia 755
    Antivirus
    Windows Defender

My Computer

System One

  • OS
    Windows 10 Pro 64bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    CyberPowerPC Gamer Xtreme 1502 (GX1502)
    CPU
    Intel Core i7 5820K 3.30 GHZ 64 bit 6-Core Processor
    Motherboard
    Gigabyte GA-X99-UD3
    Memory
    G.Skill 16GB Quad Channel DDR4-2400MHZ
    Graphics Card(s)
    EVGA GeForce GTX 970 SSC ACX 2.0+ DDR5 4GB
    Sound Card
    Creative Sound Blaster ZxR 5.1
    Monitor(s) Displays
    ASUS PA24Q 24" Pro Art IPS LCD/LED Backlit 1920x1200
    Screen Resolution
    1920x1200 16:10
    Hard Drives
    SAMSUNG 850 EVO 250GB SATA 6Gb/s 2.5" Internal SSD,
    Crucial MX100 512GB SATA 6Gb/s 2.5" Internal SSD,
    WD WD10EZEX-00RKKA0 1TB SATA 6Gb/s 3.5 Internal HDD
    PSU
    EVGA SuperNOVA 750 G2 750W 80 Plus Gold Full Modular
    Case
    AZZA Cosmas Black Gaming Case
    Cooling
    Cool Master Hyper 212 Evo Dual 120mm, ( 2) Noctua PWM 120mm Case Fans (1) Gelid PWM 120mm Blue LED
    Keyboard
    Logitech K800 Illumiated Wireless Keyboard
    Mouse
    Logitech M570 Wireless Trackball
    Internet Speed
    84mbps /94mbps
    Browser
    Mozilla Firefox 41.0.1 / Microsoft Edge/ IE 11
    Antivirus
    Norton Security 2015
    Other Info
    Pioneer BDR-209DBK 16x Blu-Ray Burner, LG 24x Dual Layer DVD Burner,
    StarTech Front Bay 22-in-1 USB 2.0 Internal Multi Media Memory Card Reader,Logitech Z906 5.1 Speaker system
Well i tried to look through them quickly, they all seem to be in system32 folder.. (svchosts.exe)

I also haven't allowed them to connect though.. maybe I should let it connect and see if I notice anything..

preocesslatest.JPG
 

My Computer

System One

  • OS
    windows 8.1
    Computer type
    Laptop
    System Manufacturer/Model
    Lenovo g750
    CPU
    i5
    Motherboard
    Some Chinese Crap..
    Memory
    8
    Graphics Card(s)
    Nvidia 755
    Antivirus
    Windows Defender
brooksndun said:
Well i tried to look through them quickly, they all seem to be in system32 folder.. (svchosts.exe)

I also haven't allowed them to connect though.. maybe I should let it connect and see if I notice anything..

View attachment 62959
Click to expand...

You may get a better idea using task manager too. If concerned with Virus, run more scans as i mentioned in post #3. Those 2 services are legit, EdgeCast and Akamai. How they were installed probably from some software you have, do not think Firefox, just because use Firefox see it happening then possibly.
 

My Computer

System One

  • OS
    Windows 10 Pro 64bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    CyberPowerPC Gamer Xtreme 1502 (GX1502)
    CPU
    Intel Core i7 5820K 3.30 GHZ 64 bit 6-Core Processor
    Motherboard
    Gigabyte GA-X99-UD3
    Memory
    G.Skill 16GB Quad Channel DDR4-2400MHZ
    Graphics Card(s)
    EVGA GeForce GTX 970 SSC ACX 2.0+ DDR5 4GB
    Sound Card
    Creative Sound Blaster ZxR 5.1
    Monitor(s) Displays
    ASUS PA24Q 24" Pro Art IPS LCD/LED Backlit 1920x1200
    Screen Resolution
    1920x1200 16:10
    Hard Drives
    SAMSUNG 850 EVO 250GB SATA 6Gb/s 2.5" Internal SSD,
    Crucial MX100 512GB SATA 6Gb/s 2.5" Internal SSD,
    WD WD10EZEX-00RKKA0 1TB SATA 6Gb/s 3.5 Internal HDD
    PSU
    EVGA SuperNOVA 750 G2 750W 80 Plus Gold Full Modular
    Case
    AZZA Cosmas Black Gaming Case
    Cooling
    Cool Master Hyper 212 Evo Dual 120mm, ( 2) Noctua PWM 120mm Case Fans (1) Gelid PWM 120mm Blue LED
    Keyboard
    Logitech K800 Illumiated Wireless Keyboard
    Mouse
    Logitech M570 Wireless Trackball
    Internet Speed
    84mbps /94mbps
    Browser
    Mozilla Firefox 41.0.1 / Microsoft Edge/ IE 11
    Antivirus
    Norton Security 2015
    Other Info
    Pioneer BDR-209DBK 16x Blu-Ray Burner, LG 24x Dual Layer DVD Burner,
    StarTech Front Bay 22-in-1 USB 2.0 Internal Multi Media Memory Card Reader,Logitech Z906 5.1 Speaker system
I definitely only see it when I open firefox and browse..
 

My Computer

System One

  • OS
    windows 8.1
    Computer type
    Laptop
    System Manufacturer/Model
    Lenovo g750
    CPU
    i5
    Motherboard
    Some Chinese Crap..
    Memory
    8
    Graphics Card(s)
    Nvidia 755
    Antivirus
    Windows Defender
brooksndun said:
I definitely only see it when I open firefox and browse..
Click to expand...

Again as listed in post # 3 go through Firefox's Addon list and extension list, see what is there and activated. We are guessing if it's legit or browser hijack, usually with these get redirected to other webpages and changes your default home page. Try running firefox with a add ons disabled for awhile on Help menu bar in Firefox. Not a malware expert, but not sure, do more scans with MRT and Malwarebytes, whatever Anti-Virus you have.
 

My Computer

System One

  • OS
    Windows 10 Pro 64bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    CyberPowerPC Gamer Xtreme 1502 (GX1502)
    CPU
    Intel Core i7 5820K 3.30 GHZ 64 bit 6-Core Processor
    Motherboard
    Gigabyte GA-X99-UD3
    Memory
    G.Skill 16GB Quad Channel DDR4-2400MHZ
    Graphics Card(s)
    EVGA GeForce GTX 970 SSC ACX 2.0+ DDR5 4GB
    Sound Card
    Creative Sound Blaster ZxR 5.1
    Monitor(s) Displays
    ASUS PA24Q 24" Pro Art IPS LCD/LED Backlit 1920x1200
    Screen Resolution
    1920x1200 16:10
    Hard Drives
    SAMSUNG 850 EVO 250GB SATA 6Gb/s 2.5" Internal SSD,
    Crucial MX100 512GB SATA 6Gb/s 2.5" Internal SSD,
    WD WD10EZEX-00RKKA0 1TB SATA 6Gb/s 3.5 Internal HDD
    PSU
    EVGA SuperNOVA 750 G2 750W 80 Plus Gold Full Modular
    Case
    AZZA Cosmas Black Gaming Case
    Cooling
    Cool Master Hyper 212 Evo Dual 120mm, ( 2) Noctua PWM 120mm Case Fans (1) Gelid PWM 120mm Blue LED
    Keyboard
    Logitech K800 Illumiated Wireless Keyboard
    Mouse
    Logitech M570 Wireless Trackball
    Internet Speed
    84mbps /94mbps
    Browser
    Mozilla Firefox 41.0.1 / Microsoft Edge/ IE 11
    Antivirus
    Norton Security 2015
    Other Info
    Pioneer BDR-209DBK 16x Blu-Ray Burner, LG 24x Dual Layer DVD Burner,
    StarTech Front Bay 22-in-1 USB 2.0 Internal Multi Media Memory Card Reader,Logitech Z906 5.1 Speaker system
brooksndun said:
As you can see from my pictures, I have Svchost.exe already allowed by default windows firewall rules..

so why is svchost.exe trying to connect more? I know this is a red flag.. especially the ports its trying to connect to..
Click to expand...
No, you have allowed svchost only TCP Out via port 443 and UDP via specific ports.
You need to add TCP Out via 80 and UDP In/Out all, or at least range 49152-65535.
 

My Computer

System One

  • OS
    Win 8.1.1 Pro x64
    Computer type
    Laptop
    System Manufacturer/Model
    Lenovo E525
    CPU
    AMD A4-3300M @ 2,0GHz
    Memory
    6GB DDR3 1333MHz
    Graphics Card(s)
    AMD Radeon HD 6480G 512MB shared
    Sound Card
    Creative Sound Blaster X-Fi Surround 5.1
    Screen Resolution
    1366x768
    Hard Drives
    WD 465GB
    Cooling
    Fusion Tweaker
    Keyboard
    Logitech K360
    Mouse
    Logitech M705
    Internet Speed
    50/50 MBps
    Browser
    Yandex
    Antivirus
    No AV & No Firewall
    Other Info
    Headphones: Sennheiser RS170
TairikuOkami said:
brooksndun said:
As you can see from my pictures, I have Svchost.exe already allowed by default windows firewall rules..

so why is svchost.exe trying to connect more? I know this is a red flag.. especially the ports its trying to connect to..
Click to expand...
No, you have allowed svchost only TCP Out via port 443 and UDP via specific ports.
You need to add TCP Out via 80 and UDP In/Out all, or at least range 49152-65535.
Click to expand...

--- Ok yes, Unless I messed something up, why doesn't the windows firewall naturally allow those ports for svchost.exe?? thats all i've been trying to ask..

I will reset my firewall again and see if it has a rule for svchost.exe on those ports you mentioned from the default, which is what I"m trying to say..

why wouldn't windows have those ports open from the default windows firewall rules..

for everything else, I will create rules for programs I want going in and out etc.. but Svchost.exe is windows process and they should have already opened what they needed from default firewall rules..

am i crazy? that is logical right?
 

My Computer

System One

  • OS
    windows 8.1
    Computer type
    Laptop
    System Manufacturer/Model
    Lenovo g750
    CPU
    i5
    Motherboard
    Some Chinese Crap..
    Memory
    8
    Graphics Card(s)
    Nvidia 755
    Antivirus
    Windows Defender
By default Windows Firewall does not even block outbound connections.
You are using Windows Firewall Control addon, which added that option.
 

My Computer

System One

  • OS
    Win 8.1.1 Pro x64
    Computer type
    Laptop
    System Manufacturer/Model
    Lenovo E525
    CPU
    AMD A4-3300M @ 2,0GHz
    Memory
    6GB DDR3 1333MHz
    Graphics Card(s)
    AMD Radeon HD 6480G 512MB shared
    Sound Card
    Creative Sound Blaster X-Fi Surround 5.1
    Screen Resolution
    1366x768
    Hard Drives
    WD 465GB
    Cooling
    Fusion Tweaker
    Keyboard
    Logitech K360
    Mouse
    Logitech M705
    Internet Speed
    50/50 MBps
    Browser
    Yandex
    Antivirus
    No AV & No Firewall
    Other Info
    Headphones: Sennheiser RS170
Ok they are all here.. as you can see windows default firewall rules does have all the proper Svchost.exe ports it should...

So once I re-enable all these, maybe that notification asking to connect will go away from my firewall..


outbound.JPG
 

My Computer

System One

  • OS
    windows 8.1
    Computer type
    Laptop
    System Manufacturer/Model
    Lenovo g750
    CPU
    i5
    Motherboard
    Some Chinese Crap..
    Memory
    8
    Graphics Card(s)
    Nvidia 755
    Antivirus
    Windows Defender
Quick question, do you know why have those two software's on PC, Akamai, EdgeCast, as weren't these ones in question or no ?
 

My Computer

System One

  • OS
    Windows 10 Pro 64bit
    Computer type
    PC/Desktop
    System Manufacturer/Model
    CyberPowerPC Gamer Xtreme 1502 (GX1502)
    CPU
    Intel Core i7 5820K 3.30 GHZ 64 bit 6-Core Processor
    Motherboard
    Gigabyte GA-X99-UD3
    Memory
    G.Skill 16GB Quad Channel DDR4-2400MHZ
    Graphics Card(s)
    EVGA GeForce GTX 970 SSC ACX 2.0+ DDR5 4GB
    Sound Card
    Creative Sound Blaster ZxR 5.1
    Monitor(s) Displays
    ASUS PA24Q 24" Pro Art IPS LCD/LED Backlit 1920x1200
    Screen Resolution
    1920x1200 16:10
    Hard Drives
    SAMSUNG 850 EVO 250GB SATA 6Gb/s 2.5" Internal SSD,
    Crucial MX100 512GB SATA 6Gb/s 2.5" Internal SSD,
    WD WD10EZEX-00RKKA0 1TB SATA 6Gb/s 3.5 Internal HDD
    PSU
    EVGA SuperNOVA 750 G2 750W 80 Plus Gold Full Modular
    Case
    AZZA Cosmas Black Gaming Case
    Cooling
    Cool Master Hyper 212 Evo Dual 120mm, ( 2) Noctua PWM 120mm Case Fans (1) Gelid PWM 120mm Blue LED
    Keyboard
    Logitech K800 Illumiated Wireless Keyboard
    Mouse
    Logitech M570 Wireless Trackball
    Internet Speed
    84mbps /94mbps
    Browser
    Mozilla Firefox 41.0.1 / Microsoft Edge/ IE 11
    Antivirus
    Norton Security 2015
    Other Info
    Pioneer BDR-209DBK 16x Blu-Ray Burner, LG 24x Dual Layer DVD Burner,
    StarTech Front Bay 22-in-1 USB 2.0 Internal Multi Media Memory Card Reader,Logitech Z906 5.1 Speaker system
I have also checked the IP address: 93.184.215.200 and it is considered as a safe IP address according to: Trend Micro Site Safety Center

The issue that you are encountering might be caused by a mis-configuration in your Windows Firewall or a new software application that you recently installed.
 

My Computer

System One

  • OS
    Windows 7
You must log in or register to reply here.
Back
Top