I am having a big problem with the Avast threat protection. Every 5 minutes a pop up appears that says that it has canceled the connection with tcp://142.250.186.68:443 which was infected with Botnet:Blacklist . The process is C:\windows\system32\svchost.exe . I have run Smart Scan multiple times but it couldnt find anything.
Whilst svchost.exe can have a legitimate reason to connect, but it is very unusual to see it in use like this. Normally you see Processes, your browser, etc.
The IP address belongs to Google (Google Cloud), so I don’t know if that could be misused.
This was a false positive.
Our virus specialists have cleared its reputation in our database, and it should no longer be detected.
Please accept our apologies for any inconvenience caused.