3 Replies Latest reply on Jan 7, 2012 11:21 AM by alexander_h

    SVCHOST.EXE trying to send coms over port 6668...

    DarrenFord

      Hi Guys..

       

      I have a server which I have found which has svchost trying to communicate over an IRC port...

       

      Is this normal or suspicious to you?

       

      The logs shows the following...

       

      2011/11/20    01:35:09 AM    Blocked by port blocking rule     C:\WINDOWS\system32\svchost.exe    Anti-virus Standard Protection:Prevent IRC communication    41.0.1.1:6668

       

      Thanks in advance...

      Regards

      Darren