svchost is constantly blocked

the prosses “svchost” at a friend get constantly blocked from trying to access the internet, it gets blocked even when it tries to connect to ips that is owned by microsoft, how do i fix this? is it a virus? a bug from the firewall maybe?

update- i scanned the computer with malwarebytes and did a full scan with Kasperskey and Comodo, there is no virus on the computer

svchost is most likely not a virus, however I would not be surprised if a virus used that name but since it connects to Microsoft that would seem counterproductive for a virus.

You can check the firewall’s application rules if there has been rules made for svchost, if not then check the global rules and see if any of the rules there would prohibit the actions of svchost.