Jump to content

Is this a false positive? IP 178.238.233.156


texaswilly
 Share

Recommended Posts

I am getting this popup every minute or so, I am giving examples from the log file as reference but by no means is the full log. All it tells me is the IP and that it is related to the svchost process. The popup shows every minute or less and I want to find out what is creating it (other than just the svchost indication, since they are a number of those running at one time) so I can take it out. The scanner states that the system is clean and checking this one for blacklisting shows that it is not blacklisted is the services I have checked. I cannot seem to be able to stop the popups unless I add this IP to the ignore list and I do not want to do that unitl I am sure it is not malware. Please help.

2012/02/03 11:59:56 -0600 IP-BLOCK 178.238.233.156 (Type: outgoing, Port: 50120, Process: svchost.exe)

2012/02/04 00:00:52 -0600 IP-BLOCK 178.238.233.156 (Type: outgoing, Port: 50121, Process: svchost.exe)

2012/02/04 00:01:48 -0600 IP-BLOCK 178.238.233.156 (Type: outgoing, Port: 50124, Process: svchost.exe)

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.