[Potentially infected with a RAT]

I ran an offline scan nothing

[Potentially infected with a RAT]

It appears no suspicious files were detected in this case either, was there anything in the FRST logs that appeared suspicious?

 

I mean the initial reason for me becoming suspicious was that i ran ' netstat -bn ' and an ip address appeared that was using a home providers isp, which is the same provider as mine but this was a different ip to the one I have. Also in a entirely different location, within the same country however a considerable distance away from my own location, originally there was only one of these ips, but on further network scans there's been a few that appear with the same network prefix & subnet but different host ID, so example of IPs 

' 90.12.163.146 '
' 90.12.163.160 '

' 90.12.163.83 '

 

My personal IP has a entirely different network prefix, subnet & hostid there's no connection between the ips & my ip other than the ISP, however is it possible my ISP is transmitting data from and to my network using other networks in different locations under their own broadband provider? ( If that makes sense )

mbar-log-2019-06-30 (00-40-38).txt

[Potentially infected with a RAT]

Nothing was detected on Scan, nor on repair here is the log file though, thanks

 

 

AdwCleaner[C01].txt

[Potentially infected with a RAT]

22 minutes ago, Maurice Naggar said:

Hi,  @Syntaxs   

My name is Maurice. I will be helping and guiding you, going forward on this case.

You mentioned " I've ran malwarebytes & windows defender numerous times but no detection has been made. "

Is this on a Windows 10 ?
 

We need to get information from this machine in order to have the proper detail to help you forward.
 NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

    Download Malwarebytes Support Tool
    
    
    Once the file is downloaded, open your Downloads folder/location of the downloaded file
    Double-click mb-support-1.4.0.615.exe to run the report
        You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
        
    Place a checkmark next to Accept License Agreement and click Next
    You will be presented with a page stating, "Get Started!"

    Do NOT use the button “Start repair” !
    Click the Advanced tab on the left column
    
    Click the Gather Logs button
    
    A progress bar will appear and the program will proceed with getting logs from your computer
   
    Upon completion, click a file named mbst-grab-results.zip will be saved to your Desktop. Click OK
    Please attach the ZIP file in your next reply.

 

Thank you.

 

Forgot to quote you, attachments are above this post

[Potentially infected with a RAT]

Thanks for your response, I have taken the steps provided

mbst-grab-results.zip

[Potentially infected with a RAT]

I was monitoring my network traffic yesterday after noticing some unusual activity and this unfamiliar IP kept popping up, I done a IP checkup & it's not attached to any services, the IP was using a UK ISP mostly used by home users, I'm also personally under the same ISP but it's definitely not the same IP I've been assigned & is in a entirely different location to myself by a long way. I've ran malwarebytes & windows defender numerous times but no detection has been made.

 

Where do I go from here?

 

Also I've ran RKill and nothing was terminated nor detected.