Committed connection

[ferelxyx]

I'm afraid you have a trojan and some are difficult to remove

[Sylver]

In case it's some bug or trojan, there must be at least some file belonging to it resident on your computer, even if it's a library or something...

I suggest:

System restore to before it happened

or

after restoring, enter directly (or enter without restoring or by putting the disk as a slave on another PC, the latter is better to prevent whatever is running from working) and look for recently added or modified files (usually it's better to search by last creation date). By the way, include folders and hidden files, obviously. When you have the culprit or culprits, delete them mercilessly or isolate them in quarantine in case you can't delete them for any circumstance (they might resist due to association with important files).

Something like this has never happened to me, but for some strange bugs that have ended up on my computer a few times, I've followed these procedures instead of racking my brains with the antivirus, and I've almost always managed to cut their crap. Although maybe you don't feel like investigating "by eye", and even less at this hour... it's understandable :sleeping:

Night greetings and good luck with the hunt :sisi:

[whoololon]

The usual thing, format and period.
That said, it is clear that free antivirus programs are a sovereign m:mudo:, that only serve to give up:mudo: with ads about the paid version.
Whatever it is, they have screwed up all of them, from "Abirria" to "Mimosin" among others.
It's that none of them have pulled out more than a couple of cookies and suspicious registration keys, others not even that. ComboFix did pull out two infected libraries, but after deleting them, running OTL, CCleaner and running MWB again, it was still the same.
What bothers me the most is that whatever it is, it's still there, and no antivirus recognizes it as a threat, and that's the worst part.
Anyway, thanks and sorry for the trouble. :love:

[Bm4n]

Put some antispy to see if they detect it, and surely there must be some background process unless it has infected explorer but then the antivirus should detect it. Good luck, I recently found myself after many years with an infection that avast detected late and 15,000 files were screwed up… Now I have returned to avg :lol:

[Kernel1.0]

Have you tried Microsoft's tools... Security Essentials and the Malicious Software Removal Tool??

[Fassou]

In good (paid) Antivirus programs, you can create a bootable CD to fight rootkits that run in stealth mode :frio:

But you can take a look at these free antirootkit utilities and these free versions of those bootable CDs.

Salu2!

[whoololon]

I already checked the rootkits last night and nothing, and I couldn't use hijackthis because the wifi connections get stuck, so this morning I messed around a bit and decided that it would take less time to shave the OS and reinstall than to spend the day trying to fix it by ear.
Full format, reinstall, backup and run antivirus on the partition where I keep the drivers and the "serious" programs... nothing. From there I install and restore until I get to DaemonTools... And it starts again!
I uninstall it, run CCleaner, restart and it's good again. I install an older version (I always keep the older versions that I check work well, both in applications and drivers) and it works normally.

Curious, isn't it?

[Sylver]

So it's Daemon Tools... So I must also be losing bandwidth as if there were no tomorrow I'll take a look...

EDIT:

Well, with Daemon Tools not working (which is how I had it xD) there don't seem to be any strange connections, apart from those of Firefox, Dropbox and SugarSync. I'll go to sleep peacefully Best regards

[whoololon]

Well, I'm not blaming the DT, but rather the DT that I already had downloaded on my hard drive, which, even if I downloaded it from the official site or from that one with the name of the soft drink that you put in gin, could have easily "constipated" while it was on my computer.
Constipated in a very bad way, because neither before, during, nor after did it trigger the "Abirria" or the RUBooted.

Edit: Did you have any strange connections before? O.o

Edit: So that this doesn't just end up as a stumble of a fool when he found the nail, I will describe the "tools" I used below:

Process Explorer for me an indispensable program, old but capable of offering an incredible amount of information about open processes and their resources.
ComboFix
HijackThis
RogueKiller
OTL
CCCleaner
MalwareBytes
ADWCleaner

I won't go into antivirus, because it's a never-ending story, and on the subject of rootkits, Fassou has already put the link. ;D

[Sylver]

Nothing nothing, I'm not saying it was the DT either, but since it happened to you, you had to check just in case, which is just a moment and that's how you stay calm xD
Everything is as it was before, that is, correctly

Thanks for sharing the steps and programs you used, this post will be very useful and will definitely help many

Best regards!

P.D.: Yes, I said I was going to sleep at 12 and here I still am… :ugly: Blessed final exams... :alone: