dizzy303

It never appeared in the allow list. I checked right away after using the "Add ::1 to exceptions" option. The option has disappeared from the menu, but no entry has been added to the allow list. @AdvancedSetup

@AdvancedSetup no alert after reboot, but as mentioned earlier, I "whitelisted" the IP ::1 in MalewareBytes and don't know how to undo it.

ZIP attached mbst-grab-results.zip

In the Malwarebytes menu (when right clicking MB in the taskbar), there was an option "Add ::1 to exceptions" or something. I clicked it, but now I don't know how to undo it (the exception doesn't appear under Detection History > Allow List).

After 3 days of silence, now I got another alert for svchost.exe again :/

I think it worked. No alerts so far. Thank you @AdvancedSetup

I removed Bonjour and ran the fix. See Fixlog.txt attached. Fixlog.txt

Sorry, forgot. Here's the FRST.txt FRST.txt

Hi, I attached the three files. Again, the MB scan didn't detect any malware. AdwCleaner detected "PUP.Optional.DownloadSponsor" and moved it into quarantine. Malwarebytes RTP Detection still keeps blocking IP address ::1, claiming it's a malware website. MB_Scan.txt AdwCleaner[C00].txt Addition.txt

I'm currently using Malwarebytes Premium Trial 4.4.4. Scan doesn't detect any malware, but the RTP detection notifies me few times a day (mostly when signing into Windows again after the computer was on standby) that a website has been blocked. In the report, it always says: File C:\\Windows\System32\svchost.exe IP Address: ::1 Type: Outbound Connection Port number varies each time. Here's an example log: