Fishy looking outgoing and incoming connections -- Am I Infected?

[Jefra]

Recently, mbam has been intercepting a lot of outgoing connections from Avast (AvastSvc.exe) and when I am using Skype, it is blocking skype, however, when it is blocking Avast and Skype they are both being blocked from going to the same IP. I find this EXTREMELY suspicious and I am almost 99% sure I have an infection. I've run the MBAR antiroot kit, a full scan with mbam and a memory scan with mbam and no infections/malware were found. However I am still concerned.

 

I have run the DDS tool, and will send a copy also of the protection log. There is a chance I may not even be infected but I'd rather be more safe than sorry. Thanks for any and all help!

 

dds.txt

attach.txt

protection-log-2013-06-20.txt

[Jefra]

Bump.

[AdvancedSetup]

Please download Malwarebytes Anti-Rootkit from HERE

• Unzip the contents to a folder in a convenient location.
• Open the folder where the contents were unzipped and run mbar.exe
• Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
• Click on the Cleanup button to remove any threats and reboot if prompted to do so.
• Wait while the system shuts down and the cleanup process is performed.
• Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
• When done, please post the two logs produced they will be in the MBAR folder... mbar-log.txt and system-log.txt

[Jefra]

Thanks for the reply! I have run mbar multiple times as requested and it didn't detected any malware. Logs attached. 

 

mbar-log-2013-06-21 (21-07-03).txt

system-log.txt

[Jefra]

Bump.

[AdvancedSetup]

Sorry but I'm in and out this weekend but will check back in as I have time.

 

 

STEP 01

 

Please download the following scanner from Kaspersky and save it to your computer: TDSSkiller

Then watch the following video on how to use the tool and make sure to temporarily disable your security applications before running TDSSkiller.

PC Winvids - How to run Kaspersky TDSSKiller

If any infection is found please make sure to choose SKIP and post back the log in case of a False Positive detection.

Once the tool has completed scanning make sure to re-enable your other security applications.
 

 

STEP 02

 

Please visit this webpage for instructions on downloading and running ComboFix: How to use ComboFix

Please make sure you disable your security applications before running ComboFix.

Once Combofix has completed it will produce and open a log file.  Please attach that log file to your next reply.
If needed the file can be located here:  C:\combofix.txt

NOTE: If you receive the message "illegal operation has been attempted on a registry key that has been marked for deletion", just reboot the computer.
 

Thanks

 

[Maurice Naggar]

@ Jefra

Are you still with us

[AdvancedSetup]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!