cancel
Showing results for 
Search instead for 
Did you mean: 

McAfee is blocking "host process for windows services"

Jump to solution

Hi there,

I checked and found that the "FirewallEventMonitor" log shows blocking events as follows:

"Time: 12/25/2019 11:06:02 AM
Event: Traffic
IP Address: 10.10.26.32
Description: HOST PROCESS FOR WINDOWS SERVICES
Path: C:\Windows\System32\svchost.exe
Message: Blocked Incoming UDP - Source xx.xx.xx.xx : (53585) Destination xxx.xxx.xxx.xxx : (1900)
Matched Rule: Block all traffic"

My question is should I whitelist the file path 'C:\Windows\System32\svchost.exe" given the fact that it is just part of normal operation of Windows?

1 Solution

Accepted Solutions
McAfee Employee chealey
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: McAfee is blocking "host process for windows services"

Jump to solution

Hi @sanba06c 

No, that's not advisable. It could be something malicious posing as/ utilising svchost.exe for example. I wouldn't be too concerned about trying to get rid of all the blocks in your logs. Do you see an impact/ is there something that is being blocked?

Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?

View solution in original post

4 Replies
McAfee Employee hem
McAfee Employee
Report Inappropriate Content
Message 2 of 5

Re: McAfee is blocking "host process for windows services"

Jump to solution

May I know what MA/ENS version you are using?

Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?please select Accept as Solution in my reply and together we can help other members?

Re: McAfee is blocking "host process for windows services"

Jump to solution

@hem , MC version is 5.10, while that of ENS is 5.6.1.308. 

McAfee Employee chealey
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: McAfee is blocking "host process for windows services"

Jump to solution

Hi @sanba06c 

No, that's not advisable. It could be something malicious posing as/ utilising svchost.exe for example. I wouldn't be too concerned about trying to get rid of all the blocks in your logs. Do you see an impact/ is there something that is being blocked?

Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?

View solution in original post

Highlighted

Re: McAfee is blocking "host process for windows services"

Jump to solution

@chealey no issue or impact reported so far, but it's just a precaution from my side to avoid any potential problems for users or network connectivity. 

Want to Ask a Question?
Many members like to perform a search first in case other customers have already asked and answered a similar question. However, to ask a question, first select a forum then click on Post a Topic. You must sign in or log in with your existing credentials.

McAfee Service Portal customers please use your existing username and password to log into the community.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community