continuous data transfer to IP 224.0.0.252

Discussion in 'Windows Vista Networking' started by Safai, Jan 25, 2009.

  1. Safai

    Safai Guest

    Good day all,

    I have realized that my PC is continually sending data to the IP address
    224.0.0.252.
    Why and how can I stop this?

    Thanks a lot,
    Morteza

    P.S. my configuration: Vista Ultimate SP1, IE7, wired modem router, ADSL
    (PPPoE) internet connection
     
    Safai, Jan 25, 2009
    #1
    1. Advertisements

  2. Safai

    NMCI Guest

    Good be a number of things... Spyware comes to my mind first.

    You have several options here from my view

    1) Look into a firewall Mcafee or Norton and add the IP to the block list.
    Also you could find out what program is sending the information and delete it.

    2) Get a spyware scanner... I dont really like these scanners but I belive
    they do work and it may delete the spyware for you.

    3) You could go oldschool and format your entire drive /reinstall. This will
    stop anything from going to that IP ever again! :p

    "Safai" wrote:

    > Good day all,
    >
    > I have realized that my PC is continually sending data to the IP address
    > 224.0.0.252.
    > Why and how can I stop this?
    >
    > Thanks a lot,
    > Morteza
    >
    > P.S. my configuration: Vista Ultimate SP1, IE7, wired modem router, ADSL
    > (PPPoE) internet connection
    >
     
    NMCI, Jan 25, 2009
    #2
    1. Advertisements

  3. Safai

    Mick Murphy Guest

    Scan your computer with these 2 Programs, and your AV, just to be sure of no
    Malware..
    What were the results of the answers supplied to you in your last post re
    this?

    http://www.spybot.info/en/index.html

    Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
    Download, install, update, and immunize your System with it.
    Then SCAN with it.
    Update it, and scan your System once a fortnight.

    http://www.malwarebytes.org/mbam.php

    Malwarebytes is as the name says, a Malware Remover!
    For the Free version scroll down their page to either download from
    Download.com, or Major Geeks.com

    --
    Mad Mike


    "Safai" wrote:

    > Good day all,
    >
    > I have realized that my PC is continually sending data to the IP address
    > 224.0.0.252.
    > Why and how can I stop this?
    >
    > Thanks a lot,
    > Morteza
    >
    > P.S. my configuration: Vista Ultimate SP1, IE7, wired modem router, ADSL
    > (PPPoE) internet connection
    >
     
    Mick Murphy, Jan 25, 2009
    #3
  4. Safai

    DL Guest

    http://www.who.is/whois-ip/ip-address/224.0.0.252/

    "Safai" <> wrote in message
    news:D...
    > Good day all,
    >
    > I have realized that my PC is continually sending data to the IP address
    > 224.0.0.252.
    > Why and how can I stop this?
    >
    > Thanks a lot,
    > Morteza
    >
    > P.S. my configuration: Vista Ultimate SP1, IE7, wired modem router, ADSL
    > (PPPoE) internet connection
     
    DL, Jan 25, 2009
    #4
  5. Safai

    Lance Guest

    Safai wrote the following on 1/25/2009 12:16:
    > Good day all,
    >
    > I have realized that my PC is continually sending data to the IP address
    > 224.0.0.252.
    > Why and how can I stop this?
    >
    > Thanks a lot,
    > Morteza
    >
    > P.S. my configuration: Vista Ultimate SP1, IE7, wired modem router, ADSL
    > (PPPoE) internet connection


    224.0.0.252 is a multicast address limited to your local subnet. It
    could be your Vista computer is using Link-Local Multicast Name
    Resolution (LLMNR) to find other computers on the local network. LLMNR
    broadcasts use this IP address.

    Further info:
    http://en.wikipedia.org/wiki/Link-local_Multicast_Name_Resolution

    Disable LLMNR:
    http://www.vistax64.com/vista-networking-sharing/95027-ability-disable-llmnr.html

    Lance
    *****
     
    Lance, Jan 25, 2009
    #5
  6. Safai

    Safai Guest

    Thank you very much Lance. Your trick (group policy) solved the problem.

    Thank you all for the input
    SAFAI

    "Lance" <lltbhill@link_earth.net> wrote in message
    news:%...
    > Safai wrote the following on 1/25/2009 12:16:
    >> Good day all,
    >>
    >> I have realized that my PC is continually sending data to the IP address
    >> 224.0.0.252.
    >> Why and how can I stop this?
    >>
    >> Thanks a lot,
    >> Morteza
    >>
    >> P.S. my configuration: Vista Ultimate SP1, IE7, wired modem router, ADSL
    >> (PPPoE) internet connection

    >
    > 224.0.0.252 is a multicast address limited to your local subnet. It could
    > be your Vista computer is using Link-Local Multicast Name Resolution
    > (LLMNR) to find other computers on the local network. LLMNR broadcasts use
    > this IP address.
    >
    > Further info:
    > http://en.wikipedia.org/wiki/Link-local_Multicast_Name_Resolution
    >
    > Disable LLMNR:
    > http://www.vistax64.com/vista-networking-sharing/95027-ability-disable-llmnr.html
    >
    > Lance
    > *****
     
    Safai, Jan 26, 2009
    #6
  7. Safai

    Banister Guest

    I have been having the same problem, but I only have Premium and the
    Group Policy is not available to me. Also the Registry does not have a
    DNS Client under the Windows NT key. Do I have to add the DNS Client
    and the EnableMulticast Registry? And if so, what type of value does it
    need to be?

    Thanks for any help,
    Banister


    --
    Banister
    Posted via http://www.vistaheads.com
     
    Banister, May 23, 2009
    #7
  8. Safai

    Guest

    On Friday, May 22, 2009 7:58:57 PM UTC-4, Banister wrote:
    > I have been having the same problem, but I only have Premium and the
    > Group Policy is not available to me. Also the Registry does not have a
    > DNS Client under the Windows NT key. Do I have to add the DNS Client
    > and the EnableMulticast Registry? And if so, what type of value does it
    > need to be?
    >
    > Thanks for any help,
    > Banister
    >
    >
    > --
    > Banister
    > Posted via http://www.vistaheads.com


    enable outbound blocking with windows firewall. Then go to the predefined settings and disable the ones for llmnr. You won't see the attempts anymore.

    Rich.
     
    , Nov 28, 2013
    #8
  9. Safai

    Guest

    On Friday, May 22, 2009 7:58:57 PM UTC-4, Banister wrote:
    > I have been having the same problem, but I only have Premium and the
    > Group Policy is not available to me. Also the Registry does not have a
    > DNS Client under the Windows NT key. Do I have to add the DNS Client
    > and the EnableMulticast Registry? And if so, what type of value does it
    > need to be?
    >
    > Thanks for any help,
    > Banister
    >
    >
    > --
    > Banister
    > Posted via http://www.vistaheads.com


    I'd like to know the answer to this too. No reason why my pc has to automatically broadcast across the network to 224.0.0.252 for every program I open. What kind of big brother nonsense is this Microsoft? I share files on my home network fine when blocking this, but why does it have to clog up and flood my logs!!!
     
    , Nov 28, 2013
    #9
  10. Safai

    Guest

    On Friday, May 22, 2009 7:58:57 PM UTC-4, Banister wrote:
    > I have been having the same problem, but I only have Premium and the
    > Group Policy is not available to me. Also the Registry does not have a
    > DNS Client under the Windows NT key. Do I have to add the DNS Client
    > and the EnableMulticast Registry? And if so, what type of value does it
    > need to be?
    >
    > Thanks for any help,
    > Banister
    >
    >
    > --
    > Banister
    > Posted via http://www.vistaheads.com


    I finally found the answer my friend. We have to add these lines into the registry from the command line.

    REG ADD â€HKLM\Software\policies\Microsoft\Windows NT\DNSClient\

    REG ADD â€HKLM\Software\policies\Microsoft\Windows NT\DNSClient†/v â€EnableMulticast†/t REG_DWORD /d “0″ /f

    for some reason adding these entries with the registry editor did not work for me. You also cannot copy and paste. Just type it in manually.

    Rich.
     
    , Nov 29, 2013
    #10
    1. Advertisements

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.
Similar Threads
  1. dennis
    Replies:
    1
    Views:
    451
    Bistey Csaba
    Sep 27, 2007
  2. Safai

    Continuous communication with IP 224.0.0.252

    Safai, Jan 22, 2009, in forum: Windows Vista Networking
    Replies:
    3
    Views:
    873
    SuperXero
    Feb 1, 2009
  3. qwert

    wdm error 224

    qwert, Jul 24, 2007, in forum: Windows Vista Drivers
    Replies:
    5
    Views:
    651
    qwert
    Jul 30, 2007
  4. dvandusen

    continuous reboot / continuous restart

    dvandusen, Jul 7, 2007, in forum: Windows Update
    Replies:
    8
    Views:
    648
    MikeM
    Mar 15, 2008
  5. MSDN newsgroup

    what is ip 224.0.0.252 used by host process for?

    MSDN newsgroup, Jul 29, 2009, in forum: Windows Vista Networking
    Replies:
    1
    Views:
    7,436
    David B.
    Jul 29, 2009
  6. Ramya Aradhya

    Winusb error after continuous data transfer (multi threaded)

    Ramya Aradhya, Sep 25, 2009, in forum: Windows Vista Drivers
    Replies:
    2
    Views:
    1,033
    Doron Holan [MSFT]
    Sep 30, 2009
  7. ebrind

    ISA 2004 Logging 224.0.0.1 to Port 0

    ebrind, Mar 7, 2006, in forum: Windows Small Business Server
    Replies:
    0
    Views:
    388
    ebrind
    Mar 7, 2006
  8. Radovan Vojtek

    W2k8 - DHCP option 252 problem

    Radovan Vojtek, Apr 29, 2008, in forum: Server Networking
    Replies:
    5
    Views:
    2,521
    Phillip Windell
    Apr 30, 2008
Loading...