jumping crab.com

Page 2 of 2 FirstFirst 12

  1. Posts : 53,365
    Windows 10 Home x64
       #11

    Oh boy, this is looking like a thread for the Security section. The host is a Chinese IP address

    sendmsg.jumpingcrab.com information at DomainReverse.com

    It looks like you have the new Trojan Upclicker

    Trojan Upclicker malware infecting PCs via mouse input | ITProPortal.com

    New Trojan Bypasses Detection with Manipulated Mouse Click - FIGHTERtools

    Volatility Labs: What do Upclicker, Poison Ivy, Cuckoo, and Volatility Have in Common?

    Upclicker Trojan Evades Sandbox Detection by Hiding in a Mouse Click | threatpost

    I could not find any legit removal procedures at the usual security sites, but perhaps VistaKing, or others will be aware of this. A Guy
      My Computer


  2. Posts : 9,582
    Windows 8.1 Pro RTM x64
       #12

    Thread moved, also requested assistance from one of our malware specialists (Jacee).
      My Computer


  3. Posts : 53,365
    Windows 10 Home x64
       #13

    Dwarf said:
    Thread moved, also requested assistance from one of our malware specialists (Jacee).
    As did I
      My Computer


  4. Posts : 2,470
    Windows 7 Home Premium
       #14

    brotherboard,

    While Jacee gets here, you can try the following:

    This program reports if Proxy / DNS configurations are found...

    Please download RogueKiller:
    Tlcharger RogueKiller (Site Officiel)

    When you get to the website, go to where it says:
    (Download link) Lien de téléchargement:

    Select the version that applies to your system: x64
    Click the dark-blue button to download.
    Save to the Desktop.

    Close all windows and browsers.
    Right-click and select: Run as Administrator

    At the program console, wait for the prescan to finish. (Under Status, it says: Prescan finished.)
    Press: SCAN

    When done, a report opens on the Desktop: RKreport.txt

    Please provide the RKreport.txt (Mode: Scan) in your reply.
    (Also, do not delete any entries, please.)
      My Computer


  5. Posts : 54
    Windows11 Pro
    Thread Starter
       #15

    Thank you for all your replies. Having taken on board all the excellent advice, recommendations and spending a lot of time on this, I have done a full restore from original back up discs (without the bloatware !)
    My Netstat scans are now showing no sign of the dreaded jumpingcrab.com connections. I'll keep a close check on things, and get back if it re-appears.
    Thanks once again. Please mark as solved.
      My Computer


  6. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #16

    Flush the DNS cache and restore MS's Hosts file ...

    Copy and paste these lines in Note pad.

    @Echo on
    pushd\windows\system32\drivers\etc
    attrib -h -s -r hosts
    echo 127.0.0.1 localhost>HOSTS
    attrib +r +h +s hosts
    popd
    ipconfig /release
    ipconfig /renew
    ipconfig /flushdns
    netsh winsock reset all
    netsh int ip reset all
    shutdown -r -t 1
    del %0


    Save as flush.bat to your desktop.
    Double click on the flush.bat file to run it.Vista and Windows 7... right click the .bat file and choose to run as Administrator. Your computer will reboot itself.

    Then, follow cottonball's instructions.
      My Computer


 
Page 2 of 2 FirstFirst 12

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 08:49.
Find Us