svchost.exe connections

Discussion in 'ESET Smart Security' started by Tyfelt, Jul 17, 2012.

Thread Status:
Not open for further replies.
  1. Tyfelt

    Tyfelt Registered Member

    Joined:
    Jun 6, 2010
    Posts:
    31
    When I open or close Firefox or Chrome it will often trigger a connection via svchost.exe to somewhere like 31.186.231.25:

    IP Address 31.186.231.25
    Host statse.webtrendslive.com
    Location GB, United Kingdom
    City -, - -
    Organization InterNAP Network Services U.K. Limited
    ISP InterNAP Network Services U.K. Limited
    AS Number AS11944 Webtrends Corporation
    Latitude 54°00'00" North
    Longitude 2°00'00" West
    Distance 2235.57 km (1389.12 miles)

    Or somewhere similar like Akamai. I assume this is just how the CDN works for Firefox and Chrome (it doesn't happen with IE) but don't know enough to be sure. I assume that this is not some kind of malware?
     
  2. nickster_uk

    nickster_uk Registered Member

    Joined:
    Feb 14, 2006
    Posts:
    190
    Webtrends sounds a little like tracking statistics...probably not malware but possibly related to your ISP??

    Akamai connections should be fine. You probably have a number of applications or even Windows services which connect to Akamai for updates and the like.
     
  3. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,033
    Location:
    California
    Hello,

    Does this occur if you start either browser in safe mode (e.g., with all add-ons and plugins disabled)?

    Regards,

    Aryeh Goretsky
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.