Jump to content

Syntaxs

Members
  • Content Count

    6
  • Joined

  • Last visited

Posts posted by Syntaxs


  1. It appears no suspicious files were detected in this case either, was there anything in the FRST logs that appeared suspicious?

     

    I mean the initial reason for me becoming suspicious was that i ran ' netstat -bn ' and an ip address appeared that was using a home providers isp, which is the same provider as mine but this was a different ip to the one I have. Also in a entirely different location, within the same country however a considerable distance away from my own location, originally there was only one of these ips, but on further network scans there's been a few that appear with the same network prefix & subnet but different host ID, so example of IPs 

    ' 90.12.163.146 '
    ' 90.12.163.160 '

    ' 90.12.163.83 '

     

    My personal IP has a entirely different network prefix, subnet & hostid there's no connection between the ips & my ip other than the ISP, however is it possible my ISP is transmitting data from and to my network using other networks in different locations under their own broadband provider? ( If that makes sense )

    mbar-log-2019-06-30 (00-40-38).txt


  2. 22 minutes ago, Maurice Naggar said:

    Hi,  @Syntaxs    :welcome:

    My name is Maurice. I will be helping and guiding you, going forward on this case.

    You mentioned " I've ran malwarebytes & windows defender numerous times but no detection has been made. "

    Is this on a Windows 10 ?
     


    We need to get information from this machine in order to have the proper detail to help you forward.
     NOTE: The tools and the information obtained is safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

        Download Malwarebytes Support Tool
        
        
        Once the file is downloaded, open your Downloads folder/location of the downloaded file
        Double-click mb-support-1.4.0.615.exe to run the report
            You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
            
        Place a checkmark next to Accept License Agreement and click Next
        You will be presented with a page stating, "Get Started!"

        Do NOT use the button “Start repair” !
        Click the Advanced tab on the left column
        
        Click the Gather Logs button
        
        A progress bar will appear and the program will proceed with getting logs from your computer
       
        Upon completion, click a file named mbst-grab-results.zip will be saved to your Desktop. Click OK
        Please attach the ZIP file in your next reply.

     

    Thank you.

     

    Forgot to quote you, attachments are above this post :)


  3. I was monitoring my network traffic yesterday after noticing some unusual activity and this unfamiliar IP kept popping up, I done a IP checkup & it's not attached to any services, the IP was using a UK ISP mostly used by home users, I'm also personally under the same ISP but it's definitely not the same IP I've been assigned & is in a entirely different location to myself by a long way. I've ran malwarebytes & windows defender numerous times but no detection has been made.

     

    Where do I go from here?

     

    Also I've ran RKill and nothing was terminated nor detected.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.