Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: jumping crab.com

23 Feb 2013   #1
brotherboard

Windows 7 Professional 64Bit
 
 
jumping crab.com

Hi

Please could anyone tell me why Firefox tries to constantly connect to jumpingcrab.com?
I say tries because I have it blocked in my hosts file to have it redirected to local host.
This activity shows up when using the command line - netstat -abf 5 > activity.txt

TCP 127.0.0.1:49775 sendmsg.jumpingcrab.com:49776 ESTABLISHED
[firefox.exe]

Also Avast is doing the same

TCP 127.0.0.1:12080 sendmsg.jumpingcrab.com:50430 ESTABLISHED
[AvastSvc.exe]


My System SpecsSystem Spec
.
23 Feb 2013   #2
HammerHead

win 7 X64 Ultimate SP1
 
 
Specs

I see you filled out your specs. Congrats to you.

I would guess you have some malware. You can start by running Malware Bytes. If you don't have it here is a link to download and install.

Malwarebytes
My System SpecsSystem Spec
23 Feb 2013   #3
brotherboard

Windows 7 Professional 64Bit
 
 

Hi

HammerHead..... thanks for the reply I ran Malwarebytes as I do about once a week anyway, and it found two trojan objects so I deleted them. They weren't there on my last scan obviously!
A scan with Kapersky TDSSkiller anti rootkit detection came up clean as did a scan with SuperAntispyware. An on line analysis of a HiJackThis scan shows no suspicious items either

Netstat still reporting

TCP 127.0.0.1:12080 sendmsg.jumpingcrab.com:50430 ESTABLISHED
[AvastSvc.exe]

and

TCP 127.0.0.1:49187 sendmsg.jumpingcrab.com:49186 ESTABLISHED
[firefox.exe]
My System SpecsSystem Spec
.

23 Feb 2013   #4
HammerHead

win 7 X64 Ultimate SP1
 
 
More Help

We will get some more help in a little while. Some members here a are good at this. They'll be along. In the meantime, I am not familiar with fire fox but you need to check your browser addons and if you see anything suspicous disable it.
My System SpecsSystem Spec
23 Feb 2013   #5
HammerHead

win 7 X64 Ultimate SP1
 
 
SpyBot

Here is a free scanner that you can use.

Download Free Spybot
My System SpecsSystem Spec
23 Feb 2013   #6
brotherboard

Windows 7 Professional 64Bit
 
 

Thanks for the replies

The following scans have all reported clean

Malwarebytes full scan
SuperAntispyware full scan
Avast Antivirus full scan
Kapersky TDSSkiller Anti-rootkit scan
HiJackthis Analysed online scan
CWS Shredder
ESET online scanner
Also Comodo CIS is not reporting this activity

Am I right to assume that by redirecting to my local host the connection is never made and I am safe for now till I can establish the culprit?
My System SpecsSystem Spec
23 Feb 2013   #7
HammerHead

win 7 X64 Ultimate SP1
 
 
Browser

Have you checked your browser for addons?

Do a file search on your OS disk for "jumpingcrab" and see what you come up with.
My System SpecsSystem Spec
23 Feb 2013   #8
carwiz

Windows 7 Pro-x64
 
 

It appears to be a serious problem according to Norton. It's a AV redirect spoof. Could be why nothing you've loaded is finding it. You may have been downloading additional malware. You might try the Norton Power Eraser but I would download it on a different machine and save it to a thumb drive then run it from that on your machine. Pay particular attention to the warning that NPE uses "aggressive methods to detect threats" and be careful what you remove.
My System SpecsSystem Spec
23 Feb 2013   #9
brotherboard

Windows 7 Professional 64Bit
 
 

many thanks I'll get to it later. Your input is much appreciated. I do have several back ups going back many weeks if all fails.

Carwiz

Following your instructions the Norton Power eraser retuned a report of no problems found.

Thanks for your input.
My System SpecsSystem Spec
23 Feb 2013   #10
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Can you upload the HiJackThis log ? Can you open up your Ethernet properties and your wireless adapter properties and see if anything is listed under proxy .
My System SpecsSystem Spec
Reply

 jumping crab.com




Thread Tools




Similar help and support threads
Thread Forum
jumping pages
Why do my pages keep jumping, it doesn't' matter what website I go on. Google Amazon /I/e. sky, I go on my Sky emails and when the page opens up it moves down after a couple of secs' then to the right. Only a mm, but if you are to quick you miss the tab you want. I have to wait until it...
Browsers & Mail
Jumping through hoops here
I'm having a lot of trouble all of a sudden and this is the latest bugbear! Acrobat (pro10) stopped working and I attempted a repair from the entry in the help menu but got a message saying this: Error 1328. Error applying patch to file C:\Config.Msi\PT43D0.tmp. It has probably been updated by...
Performance & Maintenance
Jumping cursor
I've been trying to figure this out and have read all about adjusting my touch pad sensitivity etc but that does not seem to work. Strangely, it happens only when I type a Y. Middle of a word, end of a word where ever there's a Y. Anyone else have a similar problem? I'm beginning to...
General Discussion
Jumping Cursor
When i'm inputting data into search boxes etc. Sometimes my cursor will jump backward or move while i am typing text. It happens sometimes causing me to enter part of my password in the username fields thus revealing part of my passwords. At first i though it was due to the page continuing to load...
General Discussion
Giant spider crab sheds its shell. Video
Giant spider crab sheds its shell.
Chillout Room
Jumping from XP to Win 7
Hi guys, Just a quick question about the upgrading from XP to Win 7. Can you go from Windows XP Professional to Win 7 home? or would I need to buy Windows 7 Pro upgrade package?
Installation & Setup


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 00:12.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App