I just came from PlanetElderScrolls myself and received the same "Blocked" message with "Process: C:\WINDOWS\system32\svhost.exe" This is the first time I received such an AVAST popup notice while visiting there. It also came up while looking at another page there too.
<snip>
I'm not too concerned about avast blocking access to possible malicious sites in this case (as that is working), but why it is having to block them.
Well two things:
1. You have either made a typo or you have a suspect file 'svhost.exe' the correct file name would be sv
chost.exe, so which is it ?
2. It is unusual to see svchost.exe (the legit file) connecting to the internet other than for windows updates.
So if it is the legit C:\WINDOWS\system32\svchost.exe file, you could have either, a hidden or undetected piece of malware using this file inappropriately; or if the file name is correct you are likely to have an undetected malware sample on your system.
If it is C:\WINDOWS\system32\svhost.exe checked it at virustotal, see ### below.
If multiple scanners at VT detect this then send that sample to avast for analysis, see ~~~ below.
###
Check the offending/suspect file at:
VirusTotal - Multi engine on-line virus scanner and
report the findings here the URL in the Address bar of the VT results page.
~~~
Send the sample/s to avast as a Undetected Malware:
Open the chest and right click in the Chest and select Add, navigate to where you have the sample and add it to the chest (see image). Once in the chest, right click on the file and select 'Submit to virus lab...' complete the form and submit, the file will be uploaded during the next update.
