For the past two weeks, I wasn't able to use some of the software installed on my computer (e.g. Visual Studio). There is a process that is communicating with IP address 220.127.116.11 over port 8080. All of the packets from this IP are stuck in SYN_SENT status. Because of this, I can't even install a plugin on Visual Studio.
This IP address is tied to many processes when I look it over netstat -nab output, over the same port.
How do I identity if this is really a virus? How do I find out which program is actually using it (the one from the task manager is svchost.exec which I don't think is true)? How do I uninstall this program if it is a virus?
On some IP abuse websites, this IP address is marked as spam. For example, check this out: Link
Any help would be greatly appreciated.