Hello once again and the last time. I managed to figure out the error on my end as to why I was getting the popup and telling me it was 'svchost'. I took a look at the videos I posted on Microsoft's forum and went frame by frame as slow as I can to see what that popup was and if there was a directory path to it. Turns out there was, and it wasn't a system32 directory, it was my OneDrive and this virus was acting as an svchost application. Already cleared out my OD and cleaned out any other junk and viola! No more System Watcher flags that I got every 5 minutes and no more popups when turning Kasperkey off so this topic is all set now, thank you all for helping, much appreciated!