there are basically 3 IPs i've seen popping up on the malicious website blocked and i've had this problem since a few weeks ago. 1st one Domain: (blank) IP: 95.215.1.57 Port: 63708 Type: outbound Process: C:\windows\SysWOW64\dllhost.exe 2nd one domain: fff5ee.com IP: 31.184.192.90 Port: 63733 Type: outbound Process: C:\windows\SysWOW64\dllhost.exe and the 3rd one i've only seen it today Domain: Seachnet.blinkxcore.com IP: 88.214.193.211 When these viruses attack me there would be stuff like "powershell has stopped working" and a bunch of dllhost.exe running in my processes. Please i really need an expert on this and are willing to use Teamviewer.