1.    12 Jul 2017 #1
    Join Date : Oct 2016
    Posts : 27
    Windows

    TCPView shows multiple [System Process] network connections...


    Hi all,

    TCPView is showing multiple network connections listed as [System Process].

    These are usually connected to unrecognized IPs and certainly not IPs I would want the system to automatically connect to without request or authorization on the part of the user.

    Does this indicate malware? This isn't the usual block of Akamai servers that Windows Update uses to download updates.

    I've tried an AV scan but it shows no results.

    I've tried blocking these IPs with a firewall but plenty more IPs from entirely different domains keep appearing under [System Process]​.

    How are they establishing connections, how can I identify these unknown processes and how can I completely prevent this activity without using a firewall that requires manual authorization for EVERY connection (this computer's user couldn't handle that level of complexity).

    The OS is Windows 10.

    Much appreciated.
      My ComputerSystem Spec
  2.    12 Jul 2017 #2
    Join Date : Jul 2016
    Crewe Cheshire
    Posts : 1,460
    windows 10

    If you can give us a list that will give us a better idea of what's going on. It worth checking schedule task to see if any of them are doing it
      My ComputerSystem Spec
  3.    12 Jul 2017 #3
    Join Date : Oct 2016
    Posts : 27
    Windows
    Thread Starter

    Quote Originally Posted by Samuria View Post
    If you can give us a list that will give us a better idea of what's going on. It worth checking schedule task to see if any of them are doing it
    The list has a huge variation of IPs. I haven't noted any pattern in what IPs appear.

    Could you suggest how I could identify this process or set of processes referred to as [System Process]?
      My ComputerSystem Spec
  4.    12 Jul 2017 #4
    Join Date : Oct 2014
    Trnava
    Posts : 2,866
    Windows 10.4 Home 1709 x64

    If you see it with TIME_WAIT, do not worry about it, it is normal.

    system idle process and TCP/IP - Sysinternals Forums
    Attached Thumbnails Attached Thumbnails capture_07122017_232853.jpg  
      My ComputerSystem Spec
  5.    16 Jul 2017 #5
    Join Date : Oct 2016
    Posts : 27
    Windows
    Thread Starter

    Quote Originally Posted by TairikuOkami View Post
    If you see it with TIME_WAIT, do not worry about it, it is normal.

    system idle process and TCP/IP - Sysinternals Forums
    So the System Idle Process represents connections that are in the process of being dropped.

    However, what ARE these connections? I don't recognize their IPs at all.

    Also, why is Explorer making network connections to unknown IPs and how can I stop that? I have the explorer.exe firewalled and denied access to the internet but it is continuing to connect. I understand this is probably just Windows Update but would like to control all network traffic and only allow wuausrv and other explorer-based programs network access when I'm aware of what they're doing.

    Further advice much appreciated.
      My ComputerSystem Spec
  6.    18 Jul 2017 #6
    Join Date : Oct 2016
    Posts : 27
    Windows
    Thread Starter

    I'd really appreciate it if someone could shed further assistance on the topic.
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
How to remove Multiple Network Connections?
I have a pocket Wifi Device, however, it is NOT using Wifi connection, as I have it connected to my PC using an USB Cable. Every morning I turn on my PC, it creates a new network connection, for example "Network 7" How do I remove Network 1 to...
Network and Sharing
Solved My router shows connections for disposed of digital recorder
However, I cannot find them, and indeed even those connections which should still be in existence. A search on "network" results in an unmanageable output. I want to get rid of the spurious entries. They must be somewhere otherwise I don't see why...
Network and Sharing
Solved Multiple Network connections
Can someone please tell me how to get rid of these connections. 103509 I have tried disabling them. Is it safe to delete them..? and is it safe to do so. Thanks.
Network and Sharing
Solved A Software which shows all network connections.
Hi, I need a program which will show all the incoming and outgoing connections of the system from various process. The program should be able to point out the incoming weblinks as well to any programs in order to trace them back via web browser....
Software and Apps
Network Adapter Ok in Device Manager not in network connections etc
So originally I upgraded my mini PCI card and was trying to get that working... It was recognized in the device manager but not the network connections.. I could not see the adapter to use or enable/disable etc despite having the drivers up to date....
Network and Sharing
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 04:45.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums