Xbox.com not wanted.

Tryst · 07 Mar 2012

My PC is quite new but I have AVG installed and have noticed that almost all of my internet apps are trying to listen to xbox.com. Is there a way to turn this off? I have added it to my hosts file to send it back to localhost but I feel that there must be a service or something that I can turn off to stop this happening at all.

I don't have an Xbox, nor do I want one. I also do not play games other than online F2P games. Not only does this take up bandwidth but I feel it is intrusive since I have nothing that needs to speak to the site.

The only time I need to use a Live ID is for Outlook where I use a Hotmail address as my standard address, that is handled by the Live Id Sign In Assistant in services and I now have it on Manual rather than the default automatic.

Ztruker · 07 Mar 2012

What told you they were listening for xbox.com?

Tryst · 07 Mar 2012

AVG System Tools, Network Connections tab.

game.exe is an online F2P game hosted by Perfect World International and therefore nothing to do with microsoft.

sidebar.exe has the weather widget.

uTorrent and Firefox speak for themselves.

daemonu.exe and nvtray.exe have no reason to access the net at all since auto-updates are turned off.

svchost.exe is worrying.

Firefox seems to have by-passed the hosts file loopback to localhost since the remote address appears to have connected. That is extremely worrying.

Ztruker · 07 Mar 2012

Try running Firefox without Add-ons, see if that makes any difference.

You can get there from Firefox by click on the Firefox button, then Help.

Tryst · 08 Mar 2012

It happens when Firefox isn't even running. It was running when the snapshot was taken because I was replying to this thread when I took it. However, with Firefox closed down, all the internet apps still access xbox.com and that's what I want stopped. Something is hijacking the internet connections and re-routing the apps to a site that has no relevance to it.

As i have run 2 different VK's with PUP protection and 3 different spyware/malware programs and all have come up with nothing, I can only assume it is a built in windows 7 thing in which case, there must be a way to stop it.

dreamer · 08 Mar 2012

My humble suggestion to the OP.Don't use AVG as it is bloated and Gurus here also don't recommend AVG.
Instead you can try Avast free Anti virus or Microsoft Security Essentials (MSE) as your main anti virus.And Malwarebytes Anti-Malware (MBAM) for on demand scan.

My 2 cents.

Ztruker · 08 Mar 2012

I believe that is normal. Here is what netstat -a shows for me:

Active Connections

Proto Local Address Foreign Address State
TCP 0.0.0.0:135 Dell-P370:0 LISTENING
TCP 0.0.0.0:445 Dell-P370:0 LISTENING
TCP 0.0.0.0:2869 Dell-P370:0 LISTENING
TCP 0.0.0.0:5357 Dell-P370:0 LISTENING
TCP 0.0.0.0:49152 Dell-P370:0 LISTENING
TCP 0.0.0.0:49153 Dell-P370:0 LISTENING
TCP 0.0.0.0:49154 Dell-P370:0 LISTENING
TCP 0.0.0.0:49155 Dell-P370:0 LISTENING
TCP 0.0.0.0:49165 Dell-P370:0 LISTENING
TCP 127.0.0.1:668 Dell-P370:0 LISTENING
TCP 127.0.0.1:668 Dell-P370:49191 ESTABLISHED
TCP 127.0.0.1:668 Dell-P370:49192 ESTABLISHED
TCP 127.0.0.1:2559 Dell-P370:0 LISTENING
TCP 127.0.0.1:49191 Dell-P370:668 ESTABLISHED
TCP 127.0.0.1:49192 Dell-P370:668 ESTABLISHED
TCP 127.0.0.1:52368 Dell-P370:52369 ESTABLISHED
TCP 127.0.0.1:52369 Dell-P370:52368 ESTABLISHED
TCP 127.0.0.1:52370 Dell-P370:52371 ESTABLISHED
TCP 127.0.0.1:52371 Dell-P370:52370 ESTABLISHED
TCP 192.168.2.3:139 Dell-P370:0 LISTENING
TCP 192.168.2.3:52765 dfw06s06-in-f16:http ESTABLISHED
TCP 192.168.2.3:52766 dfw06s06-in-f16:https ESTABLISHED
TCP 192.168.2.3:52767 OCSP:http ESTABLISHED
TCP 192.168.2.3:52768 dfw06s03-in-f15:https ESTABLISHED
TCP 192.168.2.3:52769 dfw06s06-in-f16:https ESTABLISHED
TCP 192.168.2.3:52770 dfw06s06-in-f16:https ESTABLISHED
TCP 192.168.2.3:52771 dfw06s06-in-f16:https ESTABLISHED
TCP 192.168.2.3:52773 dfw06s03-in-f3:https ESTABLISHED
TCP 192.168.2.3:52774 dfw06s03-in-f3:https ESTABLISHED
TCP 192.168.2.3:52775 dfw06s03-in-f3:https ESTABLISHED
TCP [::]:135 Dell-P370:0 LISTENING
TCP [::]:445 Dell-P370:0 LISTENING
TCP [::]:2869 Dell-P370:0 LISTENING
TCP [::]:5357 Dell-P370:0 LISTENING
TCP [::]:49152 Dell-P370:0 LISTENING
TCP [::]:49153 Dell-P370:0 LISTENING
TCP [::]:49154 Dell-P370:0 LISTENING
TCP [::]:49155 Dell-P370:0 LISTENING
TCP [::]:49165 Dell-P370:0 LISTENING
UDP 0.0.0.0:500 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:3702 *:*
UDP 0.0.0.0:4500 *:*
UDP 0.0.0.0:5355 *:*
UDP 0.0.0.0:49467 *:*
UDP 0.0.0.0:54925 *:*
UDP 0.0.0.0:59764 *:*
UDP 0.0.0.0:59766 *:*
UDP 0.0.0.0:62797 *:*
UDP 127.0.0.1:1900 *:*
UDP 127.0.0.1:48000 *:*
UDP 127.0.0.1:48001 *:*
UDP 127.0.0.1:61670 *:*
UDP 127.0.0.1:63152 *:*
UDP 192.168.2.3:137 *:*
UDP 192.168.2.3:138 *:*
UDP 192.168.2.3:1900 *:*
UDP 192.168.2.3:61669 *:*
UDP [::]:500 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:3702 *:*
UDP [::]:4500 *:*
UDP [::]:5355 *:*
UDP [::]:49468 *:*
UDP [::]:59765 *:*
UDP [::]:59767 *:*
UDP [::1]:1900 *:*
UDP [::1]:61668 *:*
UDP [fe80::42a:29f9:6cc9:c6fb%12]:1900 *:*
UDP [fe80::42a:29f9:6cc9:c6fb%12]:61667 *:*

Most/all of the ports you listed are shown here as well.