I keep getting messages that customsky.net has been blocked. What is this?
If you aren’t trying to connect to that site it is usually an indication your system has a hidden/undetected piece of malware trying to connect.
This needs further analysis by a malware removal specialist:
Go to this topic http://forum.avast.com/index.php?topic=53253.0 for information on Logs to assist in cleaning malware. Use the information about getting and using the tools and attach the logs here, not in the LOGS topic.
What would also help is if you can take a screenshot of the avast alert window and attach it to your next Reply, use the ‘Attachments and other options’ below the Reply text window.
a malicious website.
https://virustotal.com/nb/url/db2ebfca5e1beff40f7059ca38bb87b9d2c9abea78f2afe43d88939b27970598/analysis/1463171741/
It seems you have something that try to connect to it so follow instructions given by David
Here is a screen shot
This pretty much confirms my comments, in ordinary use, svchost.exe has no requirement to connect to the internet (other than possibly windows update and then it wouldn’t be flying off to obscure sites).
That said I would have expected you to be getting URL:Mal as the infection, but it certainly needs further investigation. If you can now follow the instructions in the URL topic that I gave.
[b]That said I would have expected you to be getting URL:Mal as the infection[/b], but it certainly needs further investigation. If you can now follow the instructions in the URL topic that I gave.That URL (customsky.net/55/[b]projectd.dat[/b]) request a file download ;)
as seen here > http://urlquery.net/report.php?id=1463176754942