Windows 10: Unusual Activity Missing Activation, Conhost, and SearchIndexer Spikes

I’ve noticed suspicious activity on my unactivated Windows system during that time it happened to have Task Manager open thats why I noticed KMS Connection Broker appears in Task Manager for a few seconds despite no KMS tools ever being used, the “Activate Windows” watermark disappeared and reappeared after many minutes, conhost.exe runsfor a few seconds without open CLI windows, and SearchIndexer.exe spiked to 26.6% CPUfor a few seconds all occurring simultaneously. Bitdefender quick scan found no threats. How should I approach this situation? Thanks in advance!

:)

 

unusual activity from the same IP

Earlier today I received a mail that there was unusual activity on my microsoft account. I logged and checked the activity page. It should the unusual activity login as well as the current details of the login I just did to check this activity. Both had
the same IP. I double checked on another site and my IP was indeed that same IP.

On the unusual activity session the following is listed

Device/platform : Windows

Browser/app : Unknown

Session activity : Unusual activity detected

To my knowledge the only app that I am sign into on my account is the MS Feedback hub. Could it be this?

Should I be worried about malware infecting my laptop and that is the cause?

 

Definition of "Unusual Activity Detected"

Hello,

I recently received an email notification that "Unusual sign-in activity was detected."

I reviewed the Recent activity page and under the column labeled "Session Type"> "Sesson activity" it was listed with "Unusual activity detected"

Does this mean that they were successful in signing into my account or were they blocked by a security code or question?

I know there is another question posted with this same subject title, however, they did not get a helpful answer, so I am reposting.

Thanks for the assistance!

 

Microsoft account unusual sign-in activity

Thank you for the reply. I have answered your questions in bold.

But I still fail to see why any of the questions/measures apply to my situation when Microsoft's "Review recent activity" log shows no "unusual sign-in activity" whatsoever. There are approximately 20 sessions showing on my activity log currently, and everyone
single one of them shows them to be: my computer, my IP address, my location, my operating system, my browser; all at times of the day when I was on my computer...

So unless Microsoft's "Review recent activity" page is inaccurate, where on earth is the "unusual sign-in activity" and why am I getting daily emails alerting me to something, that according to Microsoft's "recent activity" log, does not exist?

Thanks for your continued help/efforts,

SR

03/03/17: Update: and, FTR, I got the email again last night, 8 days in a row now. And once again, there is no "unusual sign-in activity" showing in my "recent activity" whatsoever.