Unbridled network service process

Topic

New Reply

Not sure what’s causing this. Message from BR: The network service process has run away eight times since Woody posted my email. This time, I took not
[See the full post at: Unbridled network service process]

Reply | Quote

Replies

Network Service is a built-in user account like Local System or Local Service with specific rights on the system as documented on various Microsoft sites.
You have to try to identify which specific process runs under this account, and there are plenty of the built-in services running under Network Service. You may find one of the generic svchost.exe processes being an umbrella process for many other processes. I think the most common tools for monitoring are Process Explorer and Process Monitor now owned by Microsoft, previously developed under Sysinternals.

Reply | Quote

Geez Woody,

You actually admit to scanning your box 2 months ago… Using Avira Free spyware (Read the EULA Big Guy) and you have the Ask toolbar installed… huh? You don’t need Windows 10… You’re already pwnd… Poor Woody…

PS(I’m just goofin on ya

PSS but really…

PSSS Process explorer here… https://technet.microsoft.com/en-us/sysinternals/processexplorer.aspx

104.131.161.188 is
http://2daysapp.nl/

THIS SHOULD BE OF INTEREST
https://cymon.io/72.21.91.29

and by the way… Would you get some security on your website already?

Love ya brotha’

Reply | Quote

This is a good site to help get an idea of what’s hosted on a particular IP address:

https://www.virustotal.com/en/ (choose Search)

In this case, your addresses identify as:

72.21.91.29 – An Online Certificate Status Protocol server

104.16.xx.188 – Certificate Revocation List servers.

Those addresses are used to check/manage certificate validity. Such network activity is normal, but certainly should not take much CPU time.

-Noel

Reply | Quote