Jump to content

Window 7 startup Warning connecting to bad website msftncsi.com


Recommended Posts

Hi

started to notice this from yesterday, extremely slow boot into windows 7 and the i get a warning from malwarebytes 

Malwarebytes Anti-Malware
www.malwarebytes.org


Scan, 24/12/2016 01:36, SYSTEM, JIM-PC, Context, Start:24/12/2016 01:26, Duration:10 min 27 sec, Threat Scan, Completed, 0 Malware Detections, 0 Non-Malware Detections, 
Update, 24/12/2016 01:45, SYSTEM, JIM-PC, Scheduler, Domain Database, 2016.12.23.7, 2016.12.24.1, 
Protection, 24/12/2016 01:45, SYSTEM, JIM-PC, Protection, Refresh, Starting, 
Protection, 24/12/2016 01:45, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 24/12/2016 01:45, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 24/12/2016 01:45, SYSTEM, JIM-PC, Protection, Refresh, Success, 
Protection, 24/12/2016 01:45, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Starting, 
Protection, 24/12/2016 01:45, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Started, 
Update, 24/12/2016 02:36, SYSTEM, JIM-PC, Scheduler, Malware Database, 2016.12.23.9, 2016.12.24.1, 
Protection, 24/12/2016 02:36, SYSTEM, JIM-PC, Protection, Refresh, Starting, 
Protection, 24/12/2016 02:36, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Stopping, 
Protection, 24/12/2016 02:36, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Stopped, 
Protection, 24/12/2016 02:36, SYSTEM, JIM-PC, Protection, Refresh, Success, 
Protection, 24/12/2016 02:36, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Starting, 
Protection, 24/12/2016 02:36, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Started, 
Protection, 24/12/2016 11:49, SYSTEM, JIM-PC, Protection, Malware Protection, Starting, 
Protection, 24/12/2016 11:49, SYSTEM, JIM-PC, Protection, Malware Protection, Started, 
Protection, 24/12/2016 11:49, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Starting, 
Protection, 24/12/2016 11:49, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Started, 
Detection, 24/12/2016 11:50, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Domain, 213.123.252.145, www.msftncsi.com, 49254, Outbound, C:\Windows\System32\svchost.exe, 
Detection, 24/12/2016 11:53, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Domain, 213.123.252.145, www.msftncsi.com, 49254, Outbound, C:\Windows\System32\svchost.exe, 
Detection, 24/12/2016 11:53, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Domain, 213.123.252.136, www.msftncsi.com, 49255, Outbound, C:\Windows\System32\svchost.exe, 
Detection, 24/12/2016 11:53, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Domain, 213.123.252.136, www.msftncsi.com, 49255, Outbound, C:\Windows\System32\svchost.exe, 
Detection, 24/12/2016 11:57, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Domain, 213.123.252.136, www.msftncsi.com, 49783, Outbound, C:\Windows\System32\svchost.exe, 
Detection, 24/12/2016 11:57, SYSTEM, JIM-PC, Protection, Malicious Website Protection, Domain, 213.123.252.145, www.msftncsi.com, 49784, Outbound, C:\Windows\System32\svchost.exe, 

(end)

Link to post
Share on other sites

FRST.gif Fix with Farbar Recovery Scan Tool

icon_exclaim.gif This fix was created for this user for use on that particular machine. icon_exclaim.gif


icon_exclaim.gif Running it on another one may cause damage and render the system unstable. icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

fixlist.txt

Link to post
Share on other sites

FRST.gif Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition.txt option is checked. option is checked.

    2873ryc.png

  • Press Scan button and wait.

  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.


Please attach report into your next reply.

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.