Jump to content

Constant pop-up of blocked ip (svchost.exe process)


Recommended Posts

Hello!

I've gone and followed this guide here: https://forums.malwarebytes.org/index.php?/topic/119858-available-assistance-for-possibly-infected-computers/

 

Like the title says, i'm getting annoying pop-op messages about outgoing and ingoing IP's getting blocked. It's mostly the same IP's.

I've tried to track down the location of the IP's, and i've tracked one down to Egypt in Africa.... I have no idea what info it wants to send over there.

 

If someone could help me getting rid of these pop-ups or something, then i would be very thankful.

 

OS: Windows 8.1

Addition.txt

FRST.txt

Link to post
Share on other sites

  • Root Admin

R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [966336 2014-12-04] (@ByELDI) [File not signed]

2015-01-25 19:35 - 2015-01-25 19:43 - 00000000 ____D () C:\Program Files\KMSpico

2015-01-25 19:35 - 2015-01-25 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico

Task: {0AF8085B-0FFB-4A0C-BD6B-83C09F16BEF4} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2014-12-04] (@ByELDI)

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.