Windows 10: svchost.exe multiple outgoing UDP connections

Hi,Need help with one thing that was found on several machines, all machines were scanned with all AV that we could find, all the .dll and .exe files related were scanned also and nothing was found. We have svchost.exe sending many100-1000 UDP packets per hour to different IPs all over the world on ports 50000-65000We found that this activity is going from IP Helperiphlpsvc and looks like is related to UnistackSvcGroup processes, process explorer sows these. When the machine boots we see this activity but when we stop/start the IP helper service it stops. from procmonfrom process explorer

:)

 

RAM Died: svchost error

svchost is part of the OS, it just interacts with other aspects.

 

RAM Died: svchost error

Isnt svchost a service related to programs tho, and not the OS itself?
Like for example, there are multiple svchosts at any one time for multiple programs.

Though i suppose that still suggests the OS is buggered at the core.

 

What does the svchost do?

Lots of Windows services are tied to the SVChost, and /or are listed as SVChost in the process list(s).

Unfortunatley with Vista, there's a lot more dependencies between the services, and thus you'll be FORCED to run more instances of SVChosts; unlike XP where things were more independent and you could disable more features resulting in less SVChost instances. That and XP and Vista are different.

Regardless of your Windows version, you can check out some service slimming guides or goto Black Viper's website and take his advice. Depending on your needs you may be able to cut down the amount of SVChost running, and save some RAM.

XP should never have an SVChost using 50mb. Vista however can.