Re: Why Is svchost In My Router????

From: Sparda (UseLinkToEmail_at_www.windowsforumz.com)
Date: 11/21/05


Date: 21 Nov 2005 06:35:10 GMT


"" wrote:
> Yesterday by chance I discovered an entry in my router's
> persistent port
> forwarding screen. The description is "svchost
> (192.168.2.2:1032) 41670
> UDP", public port is 41670 and forwarding to private port
> 1032. My pc's ip
> is 192.168.2.2. I removed the entry but after rebooting my
> machine it was
> back.
>
> I checked the registry (I'm using Windows XP Pro complete w/
> all updates)
> and found this entry:
> HKLMSOFTWAREMicrosoftDirectPlayNATHelpDPNHUPnPActiveNATMa
> ppingssvchost
>
> (192.168.2.2:1032) 41670 UDP. The data is in binary format.
>
> Does anyone know if this entry is being put there by a legit
> Windows process
> or should I be concerned?

You should be concerned reguradless of whether it is "ligitimate" or
not, you should take messurs to stop such activits, in this case the
best would be to install a good firewall, I would personaly recomend
ZoneAlarm.

ZoneAlarm:
http://www.zonelabs.com/store/content/catalog/products/sku_list_za.jsp?dc=12bms&ctry=US&lang=en&lid=dbtopnav_zass

-- 
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/svchost-Router-ftopict442036.html 
Visit Topic URL to contact author (reg. req'd).  Report abuse: http://www.windowsforumz.com/eform.php?p=1492689


Relevant Pages

  • Re: error 1316
    ... im not running a server. ... >> to get rid of the few files i found for microsoft office. ... > uninstall entry in the program folder. ... For one thing turn off automatic updates, ...
    (microsoft.public.windowsxp.general)
  • Re: Automatic Updates Service
    ... What bothers me is that you cannot open the Properties for Automatic Updates ... If you wish to look how this operates, Automatic Updates has an entry in the ... I would check those and compare with WUAUSERV and see if any in WUAUSERV are ... I get an error message 0x80070422 that a service ...
    (microsoft.public.windowsupdate)
  • Re: [SLE] Sudden Breakdown in Gnumeric
    ... I use a Gnumeric spreadsheet to log my bicycle training. ... I made an entry, the latest in a long series. ... packages posted to Guru's RPM or Packman (via YaST Software ... package installations and updates via YaST? ...
    (SuSE)
  • Re: Failed Windows Update
    ... The failed Windows updates issue, ... If any proxy is necessary to the Internet connection, ... Delete any entry in the Exceptions section. ...
    (microsoft.public.windowsupdate)
  • [SLE] Sudden Breakdown in Gnumeric
    ... I made an entry, the latest in a long series. ... packages posted to Guru's RPM or Packman (via YaST Software ... package installations and updates via YaST? ... the YOU-provided updates except the latest kernel update, ...
    (SuSE)