Suspicious TCP/UDP connections on Currports

Page 6 of 6 FirstFirst ... 456

  1. Slartybart
    Posts : 6,458
    x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem
       New #51

    JRT looks good and you said TDSSkiller reported nothing.

    All right. Last one.

    Download Old Timer TFC -> save to your desktop.
    TFC will close ALL open programs including your browser!
    Save any unsaved work.

    Right click, run as administrator TFC

    Click the Start button to begin the cleaning process and let it run uninterrupted to completion.

    If TFC prompts you to reboot, do so immediately.
    If TFC does NOT prompt you, then reboot your machine immediately after TFC has completed.

    Bill
      My Computer
    Quote Quote

  3. oddblob
    Posts : 23
    WINdows 7 Home Premium 64bit
    Thread Starter
       New #52

    Slartybart said:
    If TFC does NOT prompt you, then reboot your machine immediately after TFC has completed.

    Bill
    It logged me out, I logged back in and then restarted, no prompts, so I guess that means all's good?
    It made hidden files/folders appear, but I simply turned that off, I guess this journey is at an end then, I'll uninstall some more software I never use using Revo, thank you so much for all the help you've given me, I'd still be stuck at the Hosts file issue if it wasn't for you!
      My Computer
    Quote Quote

  4. Slartybart
    Posts : 6,458
    x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem
       New #53

    You're most welcome oddblob, glad you have the issue resolved. And because of currports/spybot/hosts, you discovered and erradicated other malware.

    Yeah, you're good-to-go as I see it.

    Curious though, It made hidden files/folders appear - do you mean the folder setting or some particular folder/files?

    Keep Mbam - you can remove the other scanners, especially Sophos. They get stale fairly quick due to the nature of malware and you can always download fresh version.

    Yeah for some reason Old timer-TFC has some benign side effects. I had one Windows Update restart, probably because I ddin't reboot first to let WU finish.

    Anyway, it was a pleasure working with you on this. I learned a bit in the process too.

    Bill
    -
      My Computer
    Quote Quote

 
Page 6 of 6 FirstFirst ... 456

  Related Discussions
Suspicious IE pop-up message
in System Security

When I tried to open a link from a Google search I got this pop-up message (see attachment). It seems the original link was broken and instead of showing a 404 message the link was hijacked and redirected to I tried to close it by clicking the Windows button but that opened another...
Two suspicious processes
in System Security

I tried googling them with no results. A log of my whole startup is included as an attachment. The two suspicious processes are: Yes HKLM:Run x0ux9jD C:\Users\Gummi\AppData\Local\Temp\UmVQd.exe and Yes HKCU:Run ykfXkcM C:\Users\Gummi\AppData\Local\Temp\UmVQd.exe
Suspicious file
in System Security

OK. I need help. There is an unknown file on the desktop which wont go. If I delete, it comes back if I refresh the desktop. When I right click on this file, there are only 3 options: Cut, Create Shortcut and Delete. 62446 I have scanned my computer with Hitman Pro, MBAM, Windows...
Should I get suspicious?
in General Discussion

:sarc: I'm getting this every once in a while in Resource Monitor - Network . It happens a little while after I open an IE window. Open the image and you'll understand what I mean. Is this normal???
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 13:53.
Find Us