We checked client device physically and we found that these process was using several network resources.
Antivirus was unable to locate it but searching on internet this .exe was cathegorazied as malware/adware
cacaoweb.exe
more details are indicated at below link:
Removal was done Installing, running and cleaning with AdwCleaner
Consider that similar solution was already mentioned through these old blog articles.
Antivirus - How To restore Internet connection after Virus/malware action - AdwCleaner
https://www.alessandromazzanti.com/2013/06/tips-rimuovere-iminent.html
