▲ 1 r/Malwarebytes
Svchost making requests to riskware website? Or false positive?
Woke up to this detection notice (total of 6 outbound requests to this IP) and have been endlessly worried since.
I saw other posts with similar IP addresses being indicated as false positives:
- https://www.reddit.com/r/Malwarebytes/comments/1rxzefk/false_positive/
- https://www.reddit.com/r/antivirus/comments/1ssbzv0/immediately_flagged_by_malwarebytes_from_a/
But also saw this post (that's older than the above 2) where most have said this is spyware:
VirusTotal shows only one malicious flag and indicates that this IP is also registered by Edgevana:
I did see some WindowsUpdateClient logs at around the same time so I am not sure if it does have to do with the Windows Updates as others have suggested.
Any advice or input would be much appreciated 🙏
u/Impressive_Aerie3456 — 3 days ago