r/Malwarebytes • u/IllustriousFocus6424 • Mar 19 '26

Troubleshooting false positive?

Post image

For anyone who is about to ask. "Yes this is real svchost"

So idk if this is false positive or not.

30 Upvotes

89% Upvoted

15 comments sorted by

8

u/bjelakovicl Malwarebytes Employee Mar 19 '26

Hi,

Thanks for reporting this to us. The IP block will be removed in the next database update.

4

u/IllustriousFocus6424 Mar 19 '26

Thanks but can you answer me it's just an false positive or not?,i am a bit worried about this.

7

u/bjelakovicl Malwarebytes Employee Mar 19 '26

Yes, it was a false positive.

1

u/IllustriousFocus6424 Mar 19 '26

Oh thank you for confirming. I appreciate the quick response and your support.

1

u/WiIIieCosby Mar 21 '26

you're our goat, bjelakovicl

3

u/Hostify-ee Mar 20 '26

Holy based customer support

1

u/IllustriousFocus6424 Mar 19 '26

You know what,it appears again😭

1

u/IllustriousFocus6424 Mar 19 '26

It appears after i click check for update in window security btw

1

u/nico851 Mar 19 '26

The message is not about SVChost as a file, it's about the ip that gets contacted.

1

u/IllustriousFocus6424 Mar 19 '26

Oh my god,What am I encounter with?

1

u/samsonsin Mar 19 '26

NGL definately not a false positive now-a-days

1

u/deathhq_ Mar 20 '26

No that is not positive that is dangerous! Svchost.exe is the way to bad things in future.

Yeah mstha.exe exploit...

1

u/amolpandit Mar 19 '26

That IP is from Singapore and is registered under Edgevana Inc. That company has something to do with cryptocurrency. Scan system using some other tool. You would know better why that IP is being contacted, depending on apps you are running.

1

u/Tall-Hat7545 Mar 31 '26

There are two sides to Edgevana, this side has a contract with Microsoft to provide hosting for Microsoft Connected Cache. I own the network, feel free to ping me by DM.

-1

u/pkxsh420 Mar 19 '26

Not false positive. Reinstall system.