continuous data transfer to IP 224.0.0.252

Safai

unread,

Jan 25, 2009, 3:16:37 PM1/25/09

to

Good day all,

I have realized that my PC is continually sending data to the IP address
224.0.0.252.
Why and how can I stop this?

Thanks a lot,
Morteza

P.S. my configuration: Vista Ultimate SP1, IE7, wired modem router, ADSL
(PPPoE) internet connection

NMCI

unread,

Jan 25, 2009, 3:35:03 PM1/25/09

to

Good be a number of things... Spyware comes to my mind first.

You have several options here from my view

1) Look into a firewall Mcafee or Norton and add the IP to the block list.
Also you could find out what program is sending the information and delete it.

2) Get a spyware scanner... I dont really like these scanners but I belive
they do work and it may delete the spyware for you.

3) You could go oldschool and format your entire drive /reinstall. This will
stop anything from going to that IP ever again! :P

Mick Murphy

unread,

Jan 25, 2009, 4:03:01 PM1/25/09

to

Scan your computer with these 2 Programs, and your AV, just to be sure of no
Malware..
What were the results of the answers supplied to you in your last post re
this?

http://www.spybot.info/en/index.html

Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update it, and scan your System once a fortnight.

http://www.malwarebytes.org/mbam.php

Malwarebytes is as the name says, a Malware Remover!
For the Free version scroll down their page to either download from
Download.com, or Major Geeks.com

--
Mad Mike

DL

unread,

Jan 25, 2009, 5:31:29 PM1/25/09

to

http://www.who.is/whois-ip/ip-address/224.0.0.252/

"Safai" <hsa...@chamran.ut.ac.ir> wrote in message
news:D6C4D2FB-EBA2-4D1F...@microsoft.com...

Lance

unread,

Jan 25, 2009, 6:37:12 PM1/25/09

to

224.0.0.252 is a multicast address limited to your local subnet. It
could be your Vista computer is using Link-Local Multicast Name
Resolution (LLMNR) to find other computers on the local network. LLMNR
broadcasts use this IP address.

Further info:
http://en.wikipedia.org/wiki/Link-local_Multicast_Name_Resolution

Disable LLMNR:
http://www.vistax64.com/vista-networking-sharing/95027-ability-disable-llmnr.html

Lance
*****

Safai

unread,

Jan 26, 2009, 11:51:29 AM1/26/09

to

Thank you very much Lance. Your trick (group policy) solved the problem.

Thank you all for the input
SAFAI

"Lance" <lltbhill@link_earth.net> wrote in message
news:%23rjzQX0...@TK2MSFTNGP02.phx.gbl...

Banister

unread,

May 22, 2009, 7:58:57 PM5/22/09

to

I have been having the same problem, but I only have Premium and the
Group Policy is not available to me. Also the Registry does not have a
DNS Client under the Windows NT key. Do I have to add the DNS Client
and the EnableMulticast Registry? And if so, what type of value does it
need to be?

Thanks for any help,
Banister

--
Banister
Posted via http://www.vistaheads.com

babonamaki

unread,

Sep 16, 2009, 12:28:29 PM9/16/09

to

Hi, I reckon it is the mutlicast addressfor:
http://en.wikipedia.org/wiki/Link_Layer_Topology_Discovery

turn LLTD and see what happens

--
babonamaki
------------------------------------------------------------------------
babonamaki's Profile: http://forums.techarena.in/members/135894.htm
View this thread: http://forums.techarena.in/windows-vista-network/1110080.htm

http://forums.techarena.in

Message has been deleted

raah...@gmail.com

unread,

Nov 28, 2013, 9:00:31 PM11/28/13

to

I finally found the answer my friend. We have to add these lines into the registry from the command line.

REG ADD ”HKLM\Software\policies\Microsoft\Windows NT\DNSClient\

REG ADD ”HKLM\Software\policies\Microsoft\Windows NT\DNSClient” /v ”EnableMulticast” /t REG_DWORD /d “0″ /f

for some reason adding these entries with the registry editor did not work for me. You also cannot copy and paste. Just type it in manually.

Rich.