svchost.exe connections

Discussion in 'ESET Smart Security' started by Tyfelt, Jul 17, 2012.

Thread Status:
Not open for further replies.
  1. Tyfelt

    Tyfelt Registered Member

    Joined:
    Jun 6, 2010
    Posts:
    31
    When I open or close Firefox or Chrome it will often trigger a connection via svchost.exe to somewhere like 31.186.231.25:

    IP Address 31.186.231.25
    Host statse.webtrendslive.com
    Location GB, United Kingdom
    City -, - -
    Organization InterNAP Network Services U.K. Limited
    ISP InterNAP Network Services U.K. Limited
    AS Number AS11944 Webtrends Corporation
    Latitude 54°00'00" North
    Longitude 2°00'00" West
    Distance 2235.57 km (1389.12 miles)

    Or somewhere similar like Akamai. I assume this is just how the CDN works for Firefox and Chrome (it doesn't happen with IE) but don't know enough to be sure. I assume that this is not some kind of malware?
     
  2. nickster_uk

    nickster_uk Registered Member

    Joined:
    Feb 14, 2006
    Posts:
    190
    Webtrends sounds a little like tracking statistics...probably not malware but possibly related to your ISP??

    Akamai connections should be fine. You probably have a number of applications or even Windows services which connect to Akamai for updates and the like.
     
  3. agoretsky

    agoretsky Eset Staff Account

    Joined:
    Apr 4, 2006
    Posts:
    4,032
    Location:
    California
    Hello,

    Does this occur if you start either browser in safe mode (e.g., with all add-ons and plugins disabled)?

    Regards,

    Aryeh Goretsky
     
Thread Status:
Not open for further replies.