When I started my computer, I got 2 Norton warnings: "An intrusion attempt by 31.3.239.140 was blocked" and there was a block from another computer as well. Under details it says: Network traffic from maps.wiwuvy.ed:82/y3nx095hcc matches the signature of a known attack. The attack resulted from \DEVICE\HARDDISKVOLUME3\WINDOWS\SYSWOW64\SVCHOST.EXE
Norton says that no action is required and a Malwarebytes scan (including a scan for rootkit) shows up nothing. So on the surface it seems everything might be ok, but when I go to Task Manager, look at the processes, a svchost.exe *32 process is taking up around 300,000k of memory. I've seen that fluctuate and go up to almost 1 GB at times even when the computer is idle. That specific process usually takes up less than 20,000k when idle (I've been keeping my eye on it for the last few days). It seems to only increase significantly like that after these Norton warnings. And the Norton warning itself says that the attack resulted from that specific file (svchost.exe).
Please tell me if I'm reading this wrong but if Norton is telling you that an intrusion was blocked & that no action is required but then says the attack resulted from a file in your computer (svchost.exe), then isn't that saying that there's something already wrong in your computer with that file? Especially if you see that file take up significantly more memory than it usually does? Was an intrusion really blocked?
I'm using Norton 360 (Version 21.6.0.32), Windows 7 (SP1, 64 bit). If anyone knows, please let me know if I'm worried for nothing. I've kept a clean computer for many years & my pc's have very rarely have been infected so this is kind of freaking me out right now.