Summary: If automatic time update is turned on, then it may simply be svchost periodically attempting to access the internet.
|
Why does svchost access the internet? |
This manifests a couple of ways: your firewall warns you that svchost.exe is attempting to the internet, or it attempts to dial your internet provider.
It's probably simple.
•
You probably have automatic time updates turned on. That runs as a svchost hosted process (What is SVCHOST?), and periodically attempts to connect to an internet service to set you clock for you. You can turn that off by right clicking the clock in your task bar, selecting Adjust Date/Time, and clicking on the Internet Time tab.
Related:
-
Ask Leo! - What is svchost, and why is there more than one copy running?
-
Ask Leo! - Svchost and Svchost.exe - Crashes, CPU maximization, viruses, exploits and more.
Article C2176 - September 1, 2004
i also have timed sync turned off. automatic updates turned off, automatic updates uses this process, and have also tiem sync in services.msc and in the registry disbled, however it still tries to access the internet on XP SP2, i have no malware, viruses, etc.. I've scanned ....
only time i need to allow svchost access to the internet is when i do a manual auto update thru the MS website, i only do that to see what i need to download from the download section, once that is done i deny it again. Also when i allow it access or turn the firewall off to allow all, and since auto updates is turned off and stuff, and i have processguard, it downloaded something and wanted to install a pack or something from the updates distribition folder and minad you i am spyware clean, it did this twice, I only allowed all once because i was too lazy to go back into the firwall rules and re-allow MS player access to the internet to get info. on the CDs i am ripping or just ripped to mp3..
So MS spyware is = true
Beware of this and DO NOT allow it access to the internet, unless you do autoupdates which you should not, or allow it access only when looking to see what updates one needes to download manually.. and also to re-check to make sure one has the right ones...
AGAIN THIS IS MICROSOFT SPYWARE DON't DELETE IS AS IT WILL MESS UP YOUR SYSTEM. just don't allow internet access unsupervised..
Posted by: David at May 1, 2007 4:17 AMgoogle pack's updater, updates using svchost.exe. so if u have the google pack installed, probably thats what is happening.
Posted by: Yogi at February 9, 2008 1:47 AMWhy?
Why?
Why?
Hohoho...
Posted by: Anthony at March 7, 2008 11:47 PMFirst, I have turned off my Automatic Updates, and I have trun off Automatic update for my clock, but, it still access my internet connection, and it have used 20MB per hour!!!
Please guide me, Thanks...
Hi every one I trun off the time update but it's still sending packets
Posted by: samer at May 19, 2009 1:03 AMMine tries to connect 50000 times a day and I have time service and automatic updates off.My services have NOTHING that should need to connect to the internet I have static ip mac filtered through a NAT router.
Posted by: Foog at June 27, 2009 5:31 PMSo it is definitely MS spying because the IP's are MS ip's.
BLOCK IT!!And Explorer.exe.
They are spying on you.
But if i blocked it...i can't access to the internet...i can log in on yahoo messenger or browsing from my firefox..
Posted by: Ferry at July 4, 2009 3:35 AMI've turn off time update...but it keep trying to access the internet...
if i allowed it...the send and receive bytes is increasing...although i don't use anything...help me ~~'
i mean i can't log in...
Posted by: Ferry at July 4, 2009 3:36 AMWhen I view my firewall I see svchost.exe using the internet even when all my applications are closed. I have turned off automatic updates. Is this because of a virus or something? Any idea please help.. Thanks
Posted by: Naheed at July 9, 2009 10:41 AMIts because svchost.exe is a windows process and when we visits many websites in a small span of time
the cached data & temp internet files saved in our PC request svchost.exe to avail them out bound internet connection.
simplest way to get rid of such happening is that always remove temp files & clear cache items.
check your antivirus firewall their you can stop all out bound TCP connection which will make your internet connection stable until you access it.
Enjoy surfing
03-Oct-2009
Posted by: Rehan at October 2, 2009 1:23 PM
People please do not allow svchost.exe to allow access to internet I WARNED YOU.
What you are seeing is a rootkit masked as a svchost to access to the internet. Trust me if you check task manager there will be tones of svchost .exe there but there is one hidden svchost .exe that is running hidden which is why firewalls are reporting the service trying to access the internet .
Most of the time it will contact some Russian servers and relentlessly retries to connect them if you engage internet lock.
la2atom.ru 81.177.157.74
Posted by: HumanCHeck at October 17, 2009 8:19 AMbattlecore.ru