June 22nd, 2008, 07:37 AM
And one more thing, there are three instances of svchost.exe running.
One initiated by the user
2nd initiated by the system
3rd initiated by network service !!
June 22nd, 2008, 08:37 AM
You say you connect via a lan..................... are the other users experiencing the same as you?
Is this problem consistent or does it happen at particular times of the day?
Do you have an individual account with your ISP or is it collective with the other users?
Unfortunately, when you are sharing a network connection with others, it only takes a few selfish and irresponsible people to spoil it for everyone
Last edited by nihil; June 22nd, 2008 at 11:07 AM.
June 22nd, 2008, 07:07 PM
I dont know if they're facing the same problem as i'm doing. yes, its an Individual account with the ISP. Well, it can be some smart network geek that might have did this, but this is hardly possible, as the system is completely firewalled by windows firewall, and the connections are made my system's svchost.exe file !!
June 22nd, 2008, 10:08 PM
It might be an idea if you found out?
I dont know if they're facing the same problem as i'm doing.
I would also contact your ISP and get them to test your connection.
You cannot be serious
but this is hardly possible, as the system is completely firewalled by windows firewall
Not really relevant IMO.
and the connections are made my system's svchost.exe file !!
If someone else is controlling your lan, they control your connection.
June 23rd, 2008, 03:15 AM
It's normal to have 3 or more instances of svchost.exe running on a
system. This XP install is running 6 as I type.
Both ws2_32.dll and winhttp.dll are Microsoft files. From the sound
of it, you've got some app using the .dll's to connect to a legit site.
“Everybody is ignorant, only on different subjects.” — Will Rogers
June 23rd, 2008, 07:26 AM
Thanx broken crow !!
but this is hardly possible, as the system is completely firewalled by windows firewall"
i was serious, the users here in the lan are too dumb to understand networking, and frankly to say, i know a bit more about network loopholes and exploitations than the admin himself.
But there si one thign that i noticed.When windows update is not downloadding anything, the connections arer not established. Funny to find, windows update sometimes says that there are files which have just been downloaded, and you need to install them,even whn i've just turned on the pc, and havent connected to the net. Just now when i started the pc, it showed that the pc hasnt been restarted since the last time it installed the updates, and asks me to restart the pc immediately. WTF can this be?? Is it that windows update has some malicious stuff in it ??? I just simply cannot understand. This is the first of its kind scene i've seen !
June 23rd, 2008, 07:34 AM
And one more thing, The file svchost.exe is now establishing connections with 18.104.22.168 at the 2xxx port series.
June 23rd, 2008, 07:42 PM
I'm wondering if maybe WMP is causing all of this? It could be recieving from a Limelight hosted stream. Check your plug-ins and such.
By XTC46 in forum Site Feedback/Questions/Suggestions
Last Post: August 24th, 2005, 07:52 PM
By Tedob1 in forum AntiOnline's General Chit Chat
Last Post: August 30th, 2004, 04:48 AM
By Nokia in forum Tips and Tricks
Last Post: June 18th, 2004, 04:24 PM
By -DaRK-RaiDeR- in forum Newbie Security Questions
Last Post: December 14th, 2002, 07:38 PM
By problemchild in forum The Security Tutorials Forum
Last Post: September 5th, 2002, 06:53 PM