Solved

IPCONFIG and ARP keep running in my task list!

Posted on 2010-08-30
5
403 Views
Last Modified: 2012-05-10
When I log onto facebook and play bejeweled it seems that ARP, NBTSTAT and IPCONFIG start running.  How can I stop this?
0
Comment
Question by:brothertruffle880
5 Comments
 
LVL 16

Expert Comment

by:Carol Chisholm
ID: 33560365
0
 
LVL 29

Accepted Solution

by:
Sudeep Sharma earned 500 total points
ID: 33560451
Check the authenticity of the files if they are been run from Windows folder or some other folder. Download Process Explorer from Microsoft website:

http://download.sysinternals.com/Files/ProcessExplorer.zip

Check the program you have mentioned.
IPConfig should be from C:\WINDOWS\system32\
ARP should be from C:\WINDOWS\system32\
NBTSTAT should be from C:\WINDOWS\system32\

Otherwise your system has been compromised and to clean it do the following:

Run malwarebytes in Safe Mode with Networking and update it before running a full system scan:
http://www.malwarebytes.org/mbam-download.php

Then try HitManpro to make sure anything which might be left behind is clean:
32bit
http://dl.surfright.nl/HitmanPro35.exe

64bit
http://dl.surfright.nl/HitmanPro35_x64.exe

If issue is not resolved by these tools try TDSSKiller:
http://support.kaspersky.com/downloads/utils/tdsskiller.zip
http://support.kaspersky.com/downloads/utils/tdsskiller.exe

Tutorial on TDSSKiller:
http://support.kaspersky.com/viruses/solutions?qid=208280684

If this does not resolve your issue then try Combofix:

Download Combofix
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Tutorial on how to use combofix:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Post logs here for further analysis.

Sudeep
0
 
LVL 3

Expert Comment

by:karephre
ID: 33562734
0
 

Author Comment

by:brothertruffle880
ID: 33709383
There is no spyware on my PC.  Ran malwarebytes, and spybot.  Nothing.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Sonicwall Packets use 2 interfaces to send traffic 6 32
error with file_get_contents and unserialize 22 101
Windows 7 VM unable to boot up after shutdown 12 163
Port Generator Tool 10 95
Are you unable to synchronize your OST (Offline Storage Table) file with Microsoft Exchange Server? Is your OST file exceeding 2 GB size limit? In Microsoft Outlook 2002 and earlier versions, there is a 2 GB size limit for the OST file. If the file …
Migration of Exchange mailbox can be done with the ExProfre.exe tool. But at times, when the ExProfre.exe tool migrates the Exchange Server user profile, it results in numerous synchronization problems. Synchronization error messages appear in the e…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now