Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

svchost query


  • Please log in to reply

#1
mr_angry

mr_angry

    New Member

  • Member
  • Pip
  • 3 posts
Hi Guys

I'm running XP Home & recently switched from dial-up to connecting thru a Voyager ADSL router.
Also running ZoneAlarm/AVG/PestPatrol
I'm now getting the following requests (shown in Zone Alarm) every time I connect, that svchost wishes to connect to:

169.254.22.33 (port number varies)
and
192.168.1.2 (port number varies)

IP lookup shows Internet Assigned Numbers Authority

Have checked out the IANA.org web site, and they have a load of info on this lookup result... and more

As far as I can tell, these IPs are something to do with the router, or the BT network. (BT is my ISP)

So far I've just denied access, and everything still seems to work, but any information would be much appreciated.

Thanks in advance
MrAngry
  • 0

Advertisements


#2
james_8970

james_8970

    Trusted Tech

  • Retired Staff
  • 5,084 posts
hello and welcome to geekstogo,
svchost seems to be a part of microsoft and for additional information on it you can view the following URL. I think it ought to be safe to allow acccess.
http://support.micro...om/?kbid=314056
thanx
James

P.S. are you running microsofts firewall?
  • 0

#3
mr_angry

mr_angry

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
Thanks James,

NO. MS Firewall is turned off.

It appears that these IP addresses above are reserved for private networks and router comms, so I guess it would be OK to allow them.

What I don't understand is why they are cropping up if everything works OK when they are denied access.

Also a concern is that not ALL occurencies of svchost are genuine... several viruses use a svchost camoflage.

Any comments ???



Mr.Angry
  • 0

#4
james_8970

james_8970

    Trusted Tech

  • Retired Staff
  • 5,084 posts
i think it'll take a little research on your part, use google it should give you all the awnsers you need for this type of thing but if you still need help after that come to me and i should be able to help you. However if you are suspecting that this might be a corrupt version of svchost trying to get in i would suggest you check into the malware forum to get the OK then you'll know for sure, if it really is a back door trojan or something trying to get into your computer.
Thanx
James
  • 0

#5
mr_angry

mr_angry

    New Member

  • Topic Starter
  • Member
  • Pip
  • 3 posts
Thanx again.

I'll check out the malware forum, just in case...

Mr.Angry
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP