Hi,
I have had Norton on a new computer and until a few weeks ago, everything was fine. Now, I receive notifications of "blocked intrusion attempts" all the time (sometimes up to eight-nine times/hour). Each time, the risk is shown as medium or high and the text is: "Network traffick from (a few different IP addresses) matches the signature of a known attack. The attack was resulted from DEVICE\HARDDISKVOLUME2\WINDOWS\SYSTEM32\SVCHOST.EXE."
This seems to have started when I purchased mobile internet on a flash drive and started using it. Researching the issue and clicking around from site to site, I found that a process that is normally on the C drive is on my removable internet drive. It is UIMain.exe. Is it normal for this process to be there or is it an infection?
I've scanned all my drives (including the flash drive) with Norton and later, Malwarebytes, and both show zero threats. Is there a possibility they're both missing an infection or can the repeated intrusion attempts be explained otherwise?
Thank you in advance.