svchost.exe (netsvcs) connects to weird hostnames - screenshot

lefteror

New member
Local time
3:39 AM
Messages
15
So svchost.exe (netsvcs) connects to weird hostnames and I found out by chance, when I opened Resource monitor. What does this mean? My antivirus/firewall application seems to think there's nothing wrong. How can I be sure that there's nothing suspicious going on?

Thank you
 

Attachments

  • svc.gif
    svc.gif
    224.5 KB · Views: 56

My Computer My Computer

At a glance

Windows 7 Professional 64-bitIntel Core i5 - 750 @ 2.66 GHzG.Skill 2x2 GBSaffire RADEON 5670 HD
OS
Windows 7 Professional 64-bit
CPU
Intel Core i5 - 750 @ 2.66 GHz
Motherboard
Gigabyte
Memory
G.Skill 2x2 GB
Graphics Card(s)
Saffire RADEON 5670 HD
Sound Card
Focusrite Saffire Pro 24
Monitor(s) Displays
LG W2243S
Screen Resolution
1920x1080
Hard Drives
WD 500 GB
WD Caviar Blue 640 GB
Internet Speed
24 Mbps / actually 3Mbps
Have you searched any of the "suspicious" entries? Could be just things from your isp provider but I don't know.
 

My Computer My Computer

At a glance

Windows 10x64 Build 1709Intel i7 7700HQ Kaby Lake16 GB DDR4 @2400Nvidia Geforce GTX 1060
Computer type
Laptop
Computer Manufacturer/Model Number
MSI GE72VR Apache Pro-416
OS
Windows 10x64 Build 1709
CPU
Intel i7 7700HQ Kaby Lake
Motherboard
Micro-Star Intl. MS-179B (U3C1)
Memory
16 GB DDR4 @2400
Graphics Card(s)
Nvidia Geforce GTX 1060
Screen Resolution
1920x1080 120Hz
Hard Drives
256 GB Nvme M.2 SSD

1TB HDD@7200
Cooling
Cooler Blast 4
Keyboard
Steel Series
Antivirus
Bit Defender Free
Browser
Edge
If you look at the screenshot, there are connections to (or from) Israel, Norway... I'm currently in Greece, so it doesn't make much sense, does it? Since it's svchost.exe...
 

My Computer My Computer

At a glance

Windows 7 Professional 64-bitIntel Core i5 - 750 @ 2.66 GHzG.Skill 2x2 GBSaffire RADEON 5670 HD
OS
Windows 7 Professional 64-bit
CPU
Intel Core i5 - 750 @ 2.66 GHz
Motherboard
Gigabyte
Memory
G.Skill 2x2 GB
Graphics Card(s)
Saffire RADEON 5670 HD
Sound Card
Focusrite Saffire Pro 24
Monitor(s) Displays
LG W2243S
Screen Resolution
1920x1080
Hard Drives
WD 500 GB
WD Caviar Blue 640 GB
Internet Speed
24 Mbps / actually 3Mbps
It makes perfect sense. Internet connected computer with internet connected applications are going to be connected to a lot of things. I see nothing wrong here.
 

My Computer My Computer

At a glance

Windows 10 Pro (x64)Intel Core i7-3930K (3.2GHz - 4.5GHz)4x Samsung 4GB PC3-12800 DDR3 (16GB 1600MHz)Nvidia Geforce GTX 690
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Alienware Aurora ALX R4
OS
Windows 10 Pro (x64)
CPU
Intel Core i7-3930K (3.2GHz - 4.5GHz)
Motherboard
Alienware Aurora-R4 x79
Memory
4x Samsung 4GB PC3-12800 DDR3 (16GB 1600MHz)
Graphics Card(s)
Nvidia Geforce GTX 690
Sound Card
SteelSeries Siberia Elite
Monitor(s) Displays
Dell UltraSharp U3011
Screen Resolution
2560x1600
Hard Drives
Samsung 850 Pro 256 GB, Seagate 1TB Desktop Hybrid HDD, 2x Western Digital 4TB Green HDD
PSU
875W Some Dell PSU <.<
Case
Alienware Aurora ALX
Cooling
Custom Liquid Cooling (EK CPU & GPU blocks) dual EK 480RAD
Keyboard
Logitech G710+ Mechanical
Mouse
Logitech G700s
Internet Speed
Verizon Fios (50 mbps average)
Other Info
Server: Intel NUC D54250WYK: i5-4250U, 16GB, 256 GB mSATA, Windows Server 2012 R2
Yeah ok but what is the point of several international connections and not even to the same country, rotating once in a while? I, of course, do not run any applications that could do that.
 

My Computer My Computer

At a glance

Windows 7 Professional 64-bitIntel Core i5 - 750 @ 2.66 GHzG.Skill 2x2 GBSaffire RADEON 5670 HD
OS
Windows 7 Professional 64-bit
CPU
Intel Core i5 - 750 @ 2.66 GHz
Motherboard
Gigabyte
Memory
G.Skill 2x2 GB
Graphics Card(s)
Saffire RADEON 5670 HD
Sound Card
Focusrite Saffire Pro 24
Monitor(s) Displays
LG W2243S
Screen Resolution
1920x1080
Hard Drives
WD 500 GB
WD Caviar Blue 640 GB
Internet Speed
24 Mbps / actually 3Mbps
Back
Top