In my Norton firewall log it says.
An Instance of "C:\Windows\system32\svchost.exe" is preparing to access the internet.
Few minutes later - Rule "Default Block Windows File Sharing" blocked communication. Process name is "System".
An instance of "C:\Windows\system32\lsass.exe" is preparing to access the internet.
Could this be linked to all day yesterday, I was getting this message spammed in my Norton firewall log:
Unused port blocking has blocked communications. Inbound TCP connection.
It was at least over 50 IP's trying to access my port 3724, should I be worried?
The order of events goes from bottom to top, this is the first day both of those system32 files have tried to access the internet and first day for the unused port blocking communications. inbound TCP connection as well. Can anyone confirm why they may be doing this?