Jump to content

Blocked Inbound Connection to svchost.exe


Recommended Posts

Hello! :)

I'm wondering if this is something I should be scared about, because I have been freaking out over it the past day.

svchost.exe.

Detection, 2/21/2015 3:52:58 PM, SYSTEM, J-PC, Protection, Malicious Website Protection, IP, 93.174.93.20, 1900, Inbound, C:\Windows\System32\svchost.exe,

Detection, 2/21/2015 3:52:59 PM, SYSTEM, J-PC, Protection, Malicious Website Protection, IP, 93.174.93.20, 1900, Inbound, C:\Windows\System32\svchost.exe

Port 1900 is for UPnP.

I've scanned with many different programs(MBAM, Avast!, RogueKiller, TDSSKiller, AdwCleaner, ect), but all have come back clean. Am I freaking out over nothing?

Link to post
Share on other sites

Hello and welcome back:

 

Generally, **inbound** blocks are to be expected, and do not necessarily mean that you are infected. They may mean that MBAM is doing its job.

 

However, it appears that you already have an identical topic for the same problem over in the malware removal section here: https://forums.malwarebytes.org/index.php?/topic/165173-blocked-inbound-connection-svchostexe/

 

If you would like expert help to exclude possible malware, please be patient and wait for an expert helper to assist you in that other topic in the malware removal area.

The forum is quite busy and many of the helpers are volunteers.

Someone will assist you as soon as possible.

 

Thank you for your patience and understanding,

 

P.S. Is this the same computer as this one here: https://forums.malwarebytes.org/index.php?/topic/164578-mbam-pro-blocked-svchostexe-inbound-connection/ and here: https://forums.malwarebytes.org/index.php?/topic/164616-possible-infection-four-instances-of-rundll32exe-nothing-detected-by-mbam-pro/

Link to post
Share on other sites

Yes, it is the same computer. The only reason I asked here as well was if I should continue to be anxious about something that isn't worth getting nervous over. I've noticed that both have to do with UPnP, would it be better to just disable it on my computer or my router?

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.