Home system. Unmanaged client. In a workgroup of 3 pcs (no Macs), with wireless connectivity through the router to smart phones (2) and Android tablets (2) and a Chromcast dongle. Wired printer direct to the router. Just recently in the last two weeks, I started getting this now famous, "Symantec has been blocked for the following application svchost.exe" warnings every 3-4 minutes. Only appears on one PC. Searched around these forums - many problems similar to mine but not exactly alike. Looked at IPv6 implementation - it's turned off. The first line is a good sample of the logged entry...
So, what is it looking for? I've attached screenshots of the traffic log, tryng to figure out exactly what device this PC is looking for. The address: 239.255.255.250 responds to ping but it's outside my network. Looks sketchy but perhaps it's in the "multicast" range - is that the Chromecast dongle? It's said you need to do detective work to find out what device (uPNP) the computer is looking for. But my question is: What's exactly meant by "detective work?"
If I can't figure this out, I'd be willing to "ignore" the alert. How can I set SEP to ignore this alert so that I'm not constantly pestered by it?
Thanks.
Herbo