Posted Today, 08:03 PM My PC was infected by laptop with similar issues. Before this laptop had fodhelper installed so I reinstalled Windows 10 & changed UAC settings & changed to not an Admin account on non password protected login for all my Windows computers. I used simplewall & found svchost.exe among other things being accessed remotely at different times by different ip addresses. This showed up on PC on 14 April 2023, 11:31am Protected Memory Access Blocked: svchost.exe Protected folder \Device\Harddisk\Volume1 Blocked by Controlled Folder Access I checked PC & svchost.

https://www.bleepingcomputer.com/forums/t/784665/svchost-process-being-used-accessed-remotely-by-different-ip-addresses/

#bleepingcomputer