continuous data transfer to IP 224.0.0.252

Good day all,

I have realized that my PC is continually sending data to the IP address
224.0.0.252.
Why and how can I stop this?

Thanks a lot,
Morteza

P.S. my configuration: Vista Ultimate SP1, IE7, wired modem router, ADSL
(PPPoE) internet connection

Good be a number of things... Spyware comes to my mind first.

You have several options here from my view

1) Look into a firewall Mcafee or Norton and add the IP to the block list.
Also you could find out what program is sending the information and delete it.

2) Get a spyware scanner... I dont really like these scanners but I belive
they do work and it may delete the spyware for you.

3) You could go oldschool and format your entire drive /reinstall. This will
stop anything from going to that IP ever again! :P

Scan your computer with these 2 Programs, and your AV, just to be sure of no
Malware..
What were the results of the answers supplied to you in your last post re
this?

http://www.spybot.info/en/index.html

Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update it, and scan your System once a fortnight.

http://www.malwarebytes.org/mbam.php

Malwarebytes is as the name says, a Malware Remover!
For the Free version scroll down their page to either download from
Download.com, or Major Geeks.com

http://www.who.is/whois-ip/ip-address/224.0.0.252/

224.0.0.252 is a multicast address limited to your local subnet. It
could be your Vista computer is using Link-Local Multicast Name
Resolution (LLMNR) to find other computers on the local network. LLMNR
broadcasts use this IP address.

Further info:
http://en.wikipedia.org/wiki/Link-lo...ame_Resolution

Disable LLMNR:

I have been having the same problem, but I only have Premium and the
Group Policy is not available to me. Also the Registry does not have a
DNS Client under the Windows NT key. Do I have to add the DNS Client
and the EnableMulticast Registry? And if so, what type of value does it
need to be?

[babonamaki]

Hi, I reckon it is the mutlicast addressfor:
http://en.wikipedia.org/wiki/Link_La...logy_Discovery

turn LLTD and see what happens