svchost.exe connections

[Tyfelt]

When I open or close Firefox or Chrome it will often trigger a connection via svchost.exe to somewhere like 31.186.231.25:

IP Address 31.186.231.25
Host statse.webtrendslive.com
Location GB, United Kingdom
City -, - -
Organization InterNAP Network Services U.K. Limited
ISP InterNAP Network Services U.K. Limited
AS Number AS11944 Webtrends Corporation
Latitude 54°00'00" North
Longitude 2°00'00" West
Distance 2235.57 km (1389.12 miles)

Or somewhere similar like Akamai. I assume this is just how the CDN works for Firefox and Chrome (it doesn't happen with IE) but don't know enough to be sure. I assume that this is not some kind of malware?

[nickster_uk]

Originally Posted by Tyfelt

When I open or close Firefox or Chrome it will often trigger a connection via svchost.exe to somewhere like 31.186.231.25:

IP Address 31.186.231.25
Host statse.webtrendslive.com
Location GB, United Kingdom
City -, - -
Organization InterNAP Network Services U.K. Limited
ISP InterNAP Network Services U.K. Limited
AS Number AS11944 Webtrends Corporation
Latitude 54°00'00" North
Longitude 2°00'00" West
Distance 2235.57 km (1389.12 miles)

Or somewhere similar like Akamai. I assume this is just how the CDN works for Firefox and Chrome (it doesn't happen with IE) but don't know enough to be sure. I assume that this is not some kind of malware?

Webtrends sounds a little like tracking statistics...probably not malware but possibly related to your ISP??

Akamai connections should be fine. You probably have a number of applications or even Windows services which connect to Akamai for updates and the like.

[agoretsky]

Hello,

Does this occur if you start either browser in safe mode (e.g., with all add-ons and plugins disabled)?

Regards,

Aryeh Goretsky