Bore33

I think I might have found the what caused this 😬 Since I got somewhere on the internet to the site, I looked it up, didn't trust it and so I modified my windows host file in C:\Windows\System32\drivers\etc. I added the lines: 127.0.0.1 lls.ijjiii.is 127.0.0.1 www.lls.ijjiii.is But it seems that when I run netstat, the foreign address of my localhost only then becomes that specific url. To test it, I changed the url in the file with facebook.com and I got the following: So, false alarm? I thought adding those lines would block the connection to the site, but now I'm still able to access facebook, which is a bit weird maybe. Or maybe I just don't understand how to properly use the host file :) .

When I run netstat /f immediately after starting up my pc, I get the following list of active TCP connections: I looked up the site *.ijjiii.is and it looks like it has previously been linked to malware-related issues. The corresponding services lead to Nvidia processes, but it doesn't seem legit to me. However, I have scanned my entire pc with both Malwarebytes and Norton, both say everything's okay. What do these connections mean and how can I fix the issue?