I can see no apparent malware, does the alert state what file is using svchost ?