[SOLVED] Blocked traffic to svchost.exe

[Tashogeorgiev]

A few weeks ago i got hit by a really nasty virus, but since i didn't have anything important on the laptop, i decided to install a fresh copy of Windows 10 from a USB. I deleted all partitions and formatted my drives, after installing, I updated my router's firmware and reset it, also changed the WiFi password, ran multiple antivirus scans and all showed nothing, but after installing ESET Internet security, it shows that it has blocked some traffic from svchost.exe and my router(check screenshots). What could be the cause of this?

https://ibb.co/pjPbwD9

2 hosted at ImgBB

Image 2 hosted in ImgBB

ibb.co

https://ibb.co/wL9GHvS

 

[kanewolf]

A few weeks ago i got hit by a really nasty virus, but since i didn't have anything important on the laptop, i decided to install a fresh copy of Windows 10 from a USB. I deleted all partitions and formatted my drives, after installing, I updated my router's firmware and reset it, also changed the WiFi password, ran multiple antivirus scans and all showed nothing, but after installing ESET Internet security, it shows that it has blocked some traffic from svchost.exe and my router(check screenshots). What could be the cause of this?

https://ibb.co/pjPbwD9

2 hosted at ImgBB

Image 2 hosted in ImgBB

ibb.co

https://ibb.co/wL9GHvS

Disable UPnP on your router. That should stop that traffic. It is smart security to disable UPnP anyway, that way no ports are opened without you explicitly doing it.

 

[Tashogeorgiev]

Disable UPnP on your router. That should stop that traffic. It is smart security to disable UPnP anyway, that way no ports are opened without you explicitly doing it.

Disabled it through Windows Services and through my router's interface. For now it seems like this fixed it. Really got nervous about this traffic because today i got an email from a scammer telling me that he has access to my PC and requested a payment. Normally i ignore such emails but since i got infected recently i wanted to know if there was anything suspicious still going on. All good for now.