Unknown svchost.exe DNS port 53 network activity
This is regarding a Windows XP Professional PC. I noticed heavy activity on my router as well as my PC LAN connection icon in the tray. After some digging appears to be a svchost process that is listening on port 53 with a remote address of my ISP's DNS server. My router is not set to forward DNS traffic to a specific system, and I don't run any DNS servers.
I am worried about this process since there's a lot of data being transmitted/received and it's starting to introduce delays with my web connections, and seems to be affecting available bandwidth as well.
The following have not identified any viruses or other malware:
AntiVir antivirus Avast antivirus Spybot S&D Ad Aware AVG antispyware
I got the following information for the related process from Port Explorer
Command line: c:\windows\system32\svchost.exe -k Network Service
Killing this process returns everything to "normal" with port 53 traffic stopped and all other applications working fine.
Any help explaining this activity and how to disable it would be greatly appreciated. Is this something normal with Windows I may have missed?
Thanks, Raffi
read more and respond »Posted 5 years ago by Raffi in Networking Firewalls
