Hi.. haven't had any trace of malware in a long time, I keep stuff pretty tight. I run Windows Firewall + MSE, the firewall is set to block outbound and inbound unless there's an allow rule. I also run Windows Firewall Notifier, which detects new connections and asks me if I'd like to allow/block (thus creating a rule). Today I saw an alarming outbound connection asking for permission. Path: \windows\microsoft.net\framework64\v4.0.30319\mscorsvw.exe Target: 63.148.207.142 & 63.148.207.127 ,both TCP port 80 Googled the ips and found them to be botnet associated. I've run a malwarebytes scan and MSE scan, nothing showing as infected. The mscorsvw.exe process is running (although it's a normal system process). Any ideas?
