What is happening here? Scan says the PC is clean

This happens when I open Firefox for the first time after shutdown. Apparently svchost.exe attempts to connect to two different botnets.

Scanning my C: SSD returns nothing wrong and scanning svchost.exe says that the file is not infected.

Then after a while, I get an alert that firefox is attempting to connect to a website called "dojo" etc which I did not initiate. AVG says this URL is blacklisted.

Any idead/recommendations?