Application Behaviour

I have installed Comodo for the first time and the following ‘description’ is shown. Should I have any concerns, if so what action should I take. tia.

Description: Suspicious Behaviour (svchost.exe)
Application: C:\Windows\system32\svchost.exe
Parent: C:\Windows\system32\services.exe
Protocol: UDP In
Destination: 24.67.129:ntp(123)
Details: C:\Windows\explorer.exe has tried to use C:\Windows\system32\svchost.exe
through OLE Automation, which can be used to hijack other applications.


Your system is trying to update the time setting of your PC (protocol NTP on port #123). No security issue here.



It’s safe to allow. The system is updating the system time/clock.

If you block it, svchost.exe will be blocked. With svchost blocked, your IP address can’t refresh, and you will lose connection.

If you’ve already blocked it (provided you didn’t choose “remember”) you will need to reboot; when it comes up next time, choose “remember” and Allow.

Then you should be all set, and not see that alert again.

Hope that helps. If not, or if you have any more questions, please ask.


Edit: ALG beat me to it!