When accessing the Update site, you receive the 0x80072EE2 or 0x80072EFD error

Help for v2
1

I get the 0x80072efd error and when I go to the logs I get please see below. I’ve changed my security settings and allow svchost when it asks. What else can I do? ???

COMODO Firewall Pro Logs

Date Created: 18:59:45 16-02-2007

Log Scope:: Today

Date/Time :2007-02-16 18:59:29
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 60.12.166.203, Port = 1026)
Protocol: UDP Incoming
Source: 60.12.166.203:48757
Destination: 198.166.224.63:1026
Reason: Network Control Rule ID = 7

Date/Time :2007-02-16 18:59:29
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 60.12.166.203, Port = 1027)
Protocol: UDP Incoming
Source: 60.12.166.203:48222
Destination: 198.166.224.63:1027
Reason: Network Control Rule ID = 7

Date/Time :2007-02-16 18:59:29
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 60.12.166.203, Port = 1026)
Protocol: UDP Incoming
Source: 60.12.166.203:48222
Destination: 198.166.224.63:1026
Reason: Network Control Rule ID = 7

Date/Time :2007-02-16 18:58:39
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 221.208.208.96, Port = 1027)
Protocol: UDP Incoming
Source: 221.208.208.96:48023
Destination: 198.166.224.63:1027
Reason: Network Control Rule ID = 7

Date/Time :2007-02-16 18:58:39
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 221.208.208.96, Port = 1026)
Protocol: UDP Incoming
Source: 221.208.208.96:48023
Destination: 198.166.224.63:1026
Reason: Network Control Rule ID = 7

Date/Time :2007-02-16 18:57:59
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 204.16.209.159, Port = 1027)
Protocol: UDP Incoming
Source: 204.16.209.159:36986
Destination: 198.166.224.63:1027
Reason: Network Control Rule ID = 7

Date/Time :2007-02-16 18:57:59
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 204.16.209.159, Port = 1026)
Protocol: UDP Incoming
Source: 204.16.209.159:36986
Destination: 198.166.224.63:1026
Reason: Network Control Rule ID = 7

Date/Time :2007-02-16 18:57:45
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:64.4.23.222: :http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 64.4.23.222::http(80)

Date/Time :2007-02-16 18:57:45
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:207.46.211.126: :http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 207.46.211.126::http(80)

Date/Time :2007-02-16 18:57:45
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:207.46.209.126: :http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 207.46.209.126::http(80)

Date/Time :2007-02-16 18:57:44
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:64.86.101.241: :http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 64.86.101.241::http(80)

Date/Time :2007-02-16 18:57:44
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:64.86.101.240: :http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 64.86.101.240::http(80)

Date/Time :2007-02-16 18:57:44
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:64.4.23.91: :http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 64.4.23.91::http(80)

Date/Time :2007-02-16 18:56:49
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 204.16.209.159, Port = 1026)
Protocol: UDP Incoming
Source: 204.16.209.159:56750
Destination: 198.166.224.63:1026
Reason: Network Control Rule ID = 7

Date/Time :2007-02-16 18:56:34
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 25.61.198.98, Port = 1026)
Protocol: UDP Incoming
Source: 25.61.198.98:30373
Destination: 198.166.224.63:1026
Reason: Network Control Rule ID = 7

Date/Time :2007-02-16 18:56:09
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 60.12.192.38, Port = 1027)
Protocol: UDP Incoming
Source: 60.12.192.38:57564
Destination: 198.166.224.63:1027
Reason: Network Control Rule ID = 7

Date/Time :2007-02-16 18:55:28
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:207.46.18.88: :http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 207.46.18.88::http(80)

Date/Time :2007-02-16 18:55:28
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:64.4.21.89: :http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 64.4.21.89::http(80)

Date/Time :2007-02-16 18:55:28
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:207.46.253.125: :http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 207.46.253.125::http(80)

Date/Time :2007-02-16 18:55:27
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:64.86.101.241: :http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 64.86.101.241::http(80)

Date/Time :2007-02-16 18:55:27
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:64.86.101.240: :http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 64.86.101.240::http(80)

Date/Time :2007-02-16 18:55:26
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:64.4.23.91: :http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 64.4.23.91::http(80)

2

Hi, littledog. I assume you referred to Windows Update site. According the latter portion of your log, C:\WINDOWS\system32\svchost.exe is still blocked from making outgoing TCP connections. You need to create an Application Monitor rule to allow svchost.exe outgoing connections. (I have the default certified applications by comodo option enabled, so I don’t even need this rule).

3

I would love to turn on this default how do I do this. I have clicked on the scan for known applications many times and restarted the firewall. I need to also say this has never been a problem before. I have used the update site before this. Thank you.

4

Security > Advanced > Miscellaneous > Configure > Do not show any alerts for the applications certified by COMODO → this should’ve already been enabled by default

In the Application Monitor, do you have any rules that are blocking svchost? If so, you need to remove them.

PS: I deleted the other duplicate topic