Hi everyone, since the start of august (around 2nd) my network monitor (Glasswire) started showing genuine Windows processes and currently the actual Steam process connecting in the background to two different Brazilian banks (santander .com. br and sicredi .com .br) when I'm not even Brazilian, which has me worried.
I have not downloaded anything suspicious recently at all and always scan my downloads before actually executing them.
I tried using Fiddler to check what data was being sent but since it happens randomly I couldn't catch it. Avg and Windows defender scans show nothing. Hosts file and dns address are normal. Can someone help? thx
Source: r/computerviruses · by /u/QueasyProfessor3451