Windows Xp, svchost.exe connecting to random ips with remote port 445

Im using Windows Xp professional Sp2

Whenever i start my windows, svchost.exe starts connecting to all the possible ips on lan like from to The local port ranges from 1000-1099 and the remote port being 445.

After its done with the local ips, it starts connecting to other random ips.

I tried blocking connections to the port 445 using the local security polices but it didn't work

Is there any possible way i could prevent svchost from connecting to these ips without involving any firewall installed ? since my pc slows down due to the load

I'd be thankful for any advices
2 answers Last reply
More about windows svchost connecting random remote port

  1. Hello and welcome to Tom's Hardware Forums.

    There are a number of instances of SvcHost running at any one time and you need to find out which one is phoning home - or trying to. Download HijackThis from and run a scan, concentrating on the entries in the 023 section. If in doubt, clipboard just those entries and post them back here and then tick to prevent any you don't recognise from running and click on Fix Selected then restart after it completes.

  2. I used malwarebytes to clean the virus, it was infected with the worm.

    i also used hijack this afterwords, it came clean, nothing looked suspicious.

    Although the worm was removed, It was still connecting to the different ips, so i formatted and re installed windows, its working fine now.

    Thanks for the answers
Ask a new question

Read More

Security Svchost.Exe Windows XP