Leandro

All set. kprm-20220602100559.txt

I didn't see any other svchost.exe warnings popping up now. Again, thank you so much for taking the time to help me.

Visual Studio Code was updated to the latest version VdhCoApp was installed by me. It's a companion app for a Firefox addon called Video Download Helper: https://github.com/mi-g/vdhcoapp . I'm keeping this one. Winaero Tweaker was installed by me, and I'm aware it can cause issues if not used correctly. It's uninstalled now. Windows Update didn't find any updates I made sure to reboot the computer after completing the steps above.

Here it goes. SecurityCheck.txt

I've removed that extension. I'm not seeing any more pop-ups regarding svchost.exe but I'll need to run my usual daily activities on the laptop here to see if anything happens. I'll reply in around 24 hours but I believe it should be OK now. Thank you again for taking the time to help me with this. It's very much appreciated.

Attached is the fix log. One odd thing with the forums here: every time I come back, it asks me login again (which is expected since the fix deletes cookies and so). But even making absolutely sure I'm using the right credentials, it stills bugs me that some of it is incorrect. Then I need to use the "forgot password" feature to reset it and then be able to sign in here on the forums again. Fixlog.txt

Fresh set FRST.txt Addition.txt

It found some false positives, namely AIMP media player files. I mean, I really hope they're false positives, I've been using AIMP for years as a replacement for the good old WinAMP media player. Logs attached. ESET.txt

I... No? I just bought this last week and downloaded its software from https://www.redragonzone.com/pages/download - it's the H510 Headset model listed there. The fix logs are attached. Fixlog.txt

Hello and thank you very much for the help. I've attached the files after following the steps above as instructed. SCAN RESULTS.txt Addition.txt AdwCleaner[C00].txt FRST.txt

Thanks. My concern is that svchost.exe is being used somehow for some malware (or worse) "calling home". There are several blocks for different IPs and ports there on Malwarebytes log.

Hi, about a couple weeks ago I started seeing Malwarebytes pop-up regularly showing me it is blocking outbound connections via svchost.exe. I did a full scan with it and found nothing. Also did full scans with ESET Online and Kaspersky Online and they found nothing as well, but the pop-ups keep showing up. What's going on?! Is my computer infected or not? I would really appreciate some help on this. Here's a sample of the History logs: Malwarebytes www.malwarebytes.com -Log Details- Protection Event Date: 5/25/22 Protection Event Time: 9:11 PM Log File: 5e7977bc-dc88-11ec-b121-d8bbc174be29.json -Software Information- Version: 4.5.9.198 Components Version: 1.0.1676 Update Package Version: 1.0.55400 License: Premium -System Information- OS: Windows 11 (Build 22000.675) CPU: x64 File System: NTFS User: System -Blocked Website Details- Malicious Website: 1 , C:\Windows\System32\svchost.exe, Blocked, -1, -1, 0.0.0, , -Website Data- Category: Trojan Domain: IP Address: 179.225.150.117 Port: 49346 Type: Outbound File: C:\Windows\System32\svchost.exe (end)