Hello. Im new in the forums, and i have couple noobish questions about your awesome firewall.
#1. How i can track down malicious IP adresses, or how i know which one of them is malicious. There are lots of IP´s for svchost.exe and firefox, but i dont know which one of them is bad and which is needed

My firewall always asks about this svchost.exe as "web browser" (Shows as UPD out). I have done scans with Avast, malwarebytes, SAS and A-squared in safe mode, and they found nothing, so i guess that its not keylogger etc.

#2.
What about Proactive and Firewall security modes? Which one is
better and
more secure? What are the differences between these settings like internet security, antivirus security and specially between proactive and firewall security??
When i did the leak test with firewall security - mode, it gave me score 320/340. With Proactive it was full 340/340! How?
Thank you. I wish someone could quickly answer to me, specially to question #2
