ilibarra Posted May 1, 2021 ID:1454439 Share Posted May 1, 2021 Hello, MWB blocks this outbound connection once every 3-4 minutes (two screenshots+one log.txt attached). It is related to something invoked by C:\Windows\SysWOW64\svchost.exe. I have a 64-bit system so maybe this file is invoking something else in registries. At the moment I cannot tell how to stop it. I tried Rkill/FRST and at the moment nothing detected related to it. I am conducting a full scan with ESET to further verify. If you have suggestions on how to continue this event please let me know. Regards, rtp_log.txt Link to post Share on other sites More sharing options...
ilibarra Posted May 1, 2021 Author ID:1454441 Share Posted May 1, 2021 Based on a previous thread, removing Java has stopped these RTP events. Base Link to post Share on other sites More sharing options...
kevinf80 Posted May 1, 2021 ID:1454446 Share Posted May 1, 2021 Hello ilibarra and welcome to Malwarebytes, Do you still require assistance...? Thank you, Kevin. Link to post Share on other sites More sharing options...
ilibarra Posted May 3, 2021 Author ID:1454773 Share Posted May 3, 2021 Thanks kevinf80. The problem has been solved. Best regards, Link to post Share on other sites More sharing options...
kevinf80 Posted May 3, 2021 ID:1454799 Share Posted May 3, 2021 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following for Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts