Hello everyone. This is my first post. I’ve searched and read everything and found nothing. First I am extremely pleased with the free firewall. I just did every test on “Shields Up” and my security was absolutely perfect. Bravo Comodo.
There is, however, one nagging problem with svshost. Besides the normal workings of svhost in the firewall logs I have one strange one that is perplexing to me. It’s always there and I’m sure it’s normal. Here is the entry that is always there: svshost; udp in/out; sourse= 0.0.0.0:68; destination=255.255.255.255:67 or 68; bytes in= 811kb; bytes out=692kb. What in the world is this. It’s always there and I don’t know how to block that partiular address. Any ideas. Thanks.
Your computer is talking to itself: the traffic goes from your computer (0.0.0.0) to your computer (255.255.255.255).
svchost.exe is part of M$ Windows. It’s an app that allows other programs to run as a Windows service. So if you want to know what it’s trying to do you’ll have to find out which program is using svchost.
Double-check that the app is \WINDOWS\system32[b]svchost.exe[/b]. Not svhost, not svshost. There’s plenty of malware out there that tries to look like a native Windows app by having a similar name, or exactly the same name in another folder.
As willas00 has pointed out, there is a difference, based on that one letter… with a “c” it’s a vital Windows process; with an “s” it’s something else, and potentially evidence of a virus.
However, based on the details you provide, I’m going to guess you have mis-typed the name, and it is actually svchost.exe. The connection you describe is normal, and relates to the system updating/keeping active your network/internet connection.
I would find it odd for to truly always be there; I wouldn’t be surprised to find it frequently there, but not all the time, all day every day.
The entry you are seeing is related to DHCP (Dynamic Host Configuration Protocol). Essentially, this is how your PC acquires an IP address, and how it subsequently updates that address.
This is one of the little jobs that Svchost.exe takes care of and is perfectly normal.
Thank you for the replies and explanations. Yes I typed it wrong. It is svchost. Also it is C:\WINDOWS\system32\svchost.exe. Sorry for the error. Then it seems that it both necessary and safe. Thats a big relief. I had no idea what it was. Thank You all.
