!I apologize if this is not the right place to ask this. I could not find any other sensible location!
Under Network Connections I noticed an IP connection for svchost.exe (im aware that this is a typical file, but also aware that this file can often be malicious) Tracing the IP shows Avast’s map that the IP is coming off the cost of Africa. I cant help but feel suspicious about this connection (too many horror stories.
Is this connection legit? Or maybe an error in the map? Or is my security at risk?
Thank you to anyone with a few answers.
Monitor the connections made by svchost…From process monitor u can now also find the location of a particular process…so just right click on all the svchost and click on open file location
Normally ony c:\windows\system32\svchost.exe is legitand should be running if anything else is found running then upload the file here: www.virustotal.com