jumping crab.com

Page 1 of 2 12 LastLast

  1. Posts : 54
    Windows11 Pro
       #1

    jumping crab.com


    Hi

    Please could anyone tell me why Firefox tries to constantly connect to jumpingcrab.com?
    I say tries because I have it blocked in my hosts file to have it redirected to local host.
    This activity shows up when using the command line - netstat -abf 5 > activity.txt

    TCP 127.0.0.1:49775 sendmsg.jumpingcrab.com:49776 ESTABLISHED
    [firefox.exe]

    Also Avast is doing the same

    TCP 127.0.0.1:12080 sendmsg.jumpingcrab.com:50430 ESTABLISHED
    [AvastSvc.exe]
      My Computer


  2. Posts : 1,965
    win 7 X64 Ultimate SP1
       #2

    Specs


    I see you filled out your specs. Congrats to you.

    I would guess you have some malware. You can start by running Malware Bytes. If you don't have it here is a link to download and install.

    Malwarebytes
      My Computer


  3. Posts : 54
    Windows11 Pro
    Thread Starter
       #3

    Hi

    HammerHead..... thanks for the reply I ran Malwarebytes as I do about once a week anyway, and it found two trojan objects so I deleted them. They weren't there on my last scan obviously!
    A scan with Kapersky TDSSkiller anti rootkit detection came up clean as did a scan with SuperAntispyware. An on line analysis of a HiJackThis scan shows no suspicious items either

    Netstat still reporting

    TCP 127.0.0.1:12080 sendmsg.jumpingcrab.com:50430 ESTABLISHED
    [AvastSvc.exe]

    and

    TCP 127.0.0.1:49187 sendmsg.jumpingcrab.com:49186 ESTABLISHED
    [firefox.exe]
      My Computer


  4. Posts : 1,965
    win 7 X64 Ultimate SP1
       #4

    More Help


    We will get some more help in a little while. Some members here a are good at this. They'll be along. In the meantime, I am not familiar with fire fox but you need to check your browser addons and if you see anything suspicous disable it.
      My Computer


  5. Posts : 1,965
    win 7 X64 Ultimate SP1
       #5

    SpyBot


    Here is a free scanner that you can use.

    Download Free Spybot
      My Computer


  6. Posts : 54
    Windows11 Pro
    Thread Starter
       #6

    Thanks for the replies

    The following scans have all reported clean

    Malwarebytes full scan
    SuperAntispyware full scan
    Avast Antivirus full scan
    Kapersky TDSSkiller Anti-rootkit scan
    HiJackthis Analysed online scan
    CWS Shredder
    ESET online scanner
    Also Comodo CIS is not reporting this activity

    Am I right to assume that by redirecting to my local host the connection is never made and I am safe for now till I can establish the culprit?
      My Computer


  7. Posts : 1,965
    win 7 X64 Ultimate SP1
       #7

    Browser


    Have you checked your browser for addons?

    Do a file search on your OS disk for "jumpingcrab" and see what you come up with.
      My Computer


  8. Posts : 4,161
    Windows 7 Pro-x64
       #8

    It appears to be a serious problem according to Norton. It's a AV redirect spoof. Could be why nothing you've loaded is finding it. You may have been downloading additional malware. You might try the Norton Power Eraser but I would download it on a different machine and save it to a thumb drive then run it from that on your machine. Pay particular attention to the warning that NPE uses "aggressive methods to detect threats" and be careful what you remove.
      My Computer


  9. Posts : 54
    Windows11 Pro
    Thread Starter
       #9

    many thanks I'll get to it later. Your input is much appreciated. I do have several back ups going back many weeks if all fails.

    Carwiz

    Following your instructions the Norton Power eraser retuned a report of no problems found.

    Thanks for your input.
    Last edited by brotherboard; 23 Feb 2013 at 17:55.
      My Computer


  10. Posts : 6,830
    Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
       #10

    Can you upload the HiJackThis log ? Can you open up your Ethernet properties and your wireless adapter properties and see if anything is listed under proxy .
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 23:47.
Find Us