Score:0

why chrome.exe and svchost.exe connecting to RDP port 3389 on 127.0.0.1

nl flag

i noticed in the event viewer that chrome.exe and svchost.exe are connecting to 127.0.0.1 remotely using RDP port 3389 on multiple Pc's . i couldn't figure out why this event happens even though that none of the employee is using chrome remote desktop application and i couldn't replicate this scenario on my own pc does anyone have similar issue?enter image description here

charles nawar avatar
nl flag
attached pics here https://imgur.com/a/jaGsGon https://imgur.com/Pr0drut https://imgur.com/GYkbR2E
Score:0
th flag

I have no reputation to comment so I post as an answer. Some of sites are known to perform a port scan of localhost:

https://security.stackexchange.com/questions/232345/ebay-web-site-tries-to-connect-to-wss-localhostxxxxx-is-this-legit-or-they

in flag
Hi vkip, and welcome to the community. The link you posted is right on target but in order to make your contribution more useful it is always a good practice to expand or summarise the content of the external resources. Could you edit your answer to add some more context?
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.