Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: jumping crab.com


23 Feb 2013   #1

Windows 7 Home Premium 64bit / Service pack 1
 
 
jumping crab.com

Hi

Please could anyone tell me why Firefox tries to constantly connect to jumpingcrab.com?
I say tries because I have it blocked in my hosts file to have it redirected to local host.
This activity shows up when using the command line - netstat -abf 5 > activity.txt

TCP 127.0.0.1:49775 sendmsg.jumpingcrab.com:49776 ESTABLISHED
[firefox.exe]

Also Avast is doing the same

TCP 127.0.0.1:12080 sendmsg.jumpingcrab.com:50430 ESTABLISHED
[AvastSvc.exe]


My System SpecsSystem Spec
.

23 Feb 2013   #2

win 7 X64 Ultimate SP1
 
 
Specs

I see you filled out your specs. Congrats to you.

I would guess you have some malware. You can start by running Malware Bytes. If you don't have it here is a link to download and install.

Malwarebytes
My System SpecsSystem Spec
23 Feb 2013   #3

Windows 7 Home Premium 64bit / Service pack 1
 
 

Hi

HammerHead..... thanks for the reply I ran Malwarebytes as I do about once a week anyway, and it found two trojan objects so I deleted them. They weren't there on my last scan obviously!
A scan with Kapersky TDSSkiller anti rootkit detection came up clean as did a scan with SuperAntispyware. An on line analysis of a HiJackThis scan shows no suspicious items either

Netstat still reporting

TCP 127.0.0.1:12080 sendmsg.jumpingcrab.com:50430 ESTABLISHED
[AvastSvc.exe]

and

TCP 127.0.0.1:49187 sendmsg.jumpingcrab.com:49186 ESTABLISHED
[firefox.exe]
My System SpecsSystem Spec
.


23 Feb 2013   #4

win 7 X64 Ultimate SP1
 
 
More Help

We will get some more help in a little while. Some members here a are good at this. They'll be along. In the meantime, I am not familiar with fire fox but you need to check your browser addons and if you see anything suspicous disable it.
My System SpecsSystem Spec
23 Feb 2013   #5

win 7 X64 Ultimate SP1
 
 
SpyBot

Here is a free scanner that you can use.

Download Free Spybot
My System SpecsSystem Spec
23 Feb 2013   #6

Windows 7 Home Premium 64bit / Service pack 1
 
 

Thanks for the replies

The following scans have all reported clean

Malwarebytes full scan
SuperAntispyware full scan
Avast Antivirus full scan
Kapersky TDSSkiller Anti-rootkit scan
HiJackthis Analysed online scan
CWS Shredder
ESET online scanner
Also Comodo CIS is not reporting this activity

Am I right to assume that by redirecting to my local host the connection is never made and I am safe for now till I can establish the culprit?
My System SpecsSystem Spec
23 Feb 2013   #7

win 7 X64 Ultimate SP1
 
 
Browser

Have you checked your browser for addons?

Do a file search on your OS disk for "jumpingcrab" and see what you come up with.
My System SpecsSystem Spec
23 Feb 2013   #8

Windows 7 Pro-x64
 
 

It appears to be a serious problem according to Norton. It's a AV redirect spoof. Could be why nothing you've loaded is finding it. You may have been downloading additional malware. You might try the Norton Power Eraser but I would download it on a different machine and save it to a thumb drive then run it from that on your machine. Pay particular attention to the warning that NPE uses "aggressive methods to detect threats" and be careful what you remove.
My System SpecsSystem Spec
23 Feb 2013   #9

Windows 7 Home Premium 64bit / Service pack 1
 
 

many thanks I'll get to it later. Your input is much appreciated. I do have several back ups going back many weeks if all fails.

Carwiz

Following your instructions the Norton Power eraser retuned a report of no problems found.

Thanks for your input.
My System SpecsSystem Spec
23 Feb 2013   #10

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Can you upload the HiJackThis log ? Can you open up your Ethernet properties and your wireless adapter properties and see if anything is listed under proxy .
My System SpecsSystem Spec
Reply

 jumping crab.com




Thread Tools



Similar help and support threads for2: jumping crab.com
Thread Forum
jumping pages Browsers & Mail
Jumping cursor General Discussion
Solved Jumping Cursor General Discussion
Giant spider crab sheds its shell. Video Chillout Room
Cursor jumping Browsers & Mail
Jumping from XP to Win 7 Installation & Setup

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 10:33 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33