Solved

IPCONFIG and ARP keep running in my task list!

Posted on 2010-08-30
5
406 Views
Last Modified: 2012-05-10
When I log onto facebook and play bejeweled it seems that ARP, NBTSTAT and IPCONFIG start running.  How can I stop this?
0
Comment
Question by:brothertruffle880
5 Comments
 
LVL 16

Expert Comment

by:Carol Chisholm
ID: 33560365
0
 
LVL 30

Accepted Solution

by:
Sudeep Sharma earned 500 total points
ID: 33560451
Check the authenticity of the files if they are been run from Windows folder or some other folder. Download Process Explorer from Microsoft website:

http://download.sysinternals.com/Files/ProcessExplorer.zip

Check the program you have mentioned.
IPConfig should be from C:\WINDOWS\system32\
ARP should be from C:\WINDOWS\system32\
NBTSTAT should be from C:\WINDOWS\system32\

Otherwise your system has been compromised and to clean it do the following:

Run malwarebytes in Safe Mode with Networking and update it before running a full system scan:
http://www.malwarebytes.org/mbam-download.php

Then try HitManpro to make sure anything which might be left behind is clean:
32bit
http://dl.surfright.nl/HitmanPro35.exe

64bit
http://dl.surfright.nl/HitmanPro35_x64.exe

If issue is not resolved by these tools try TDSSKiller:
http://support.kaspersky.com/downloads/utils/tdsskiller.zip
http://support.kaspersky.com/downloads/utils/tdsskiller.exe

Tutorial on TDSSKiller:
http://support.kaspersky.com/viruses/solutions?qid=208280684

If this does not resolve your issue then try Combofix:

Download Combofix
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Tutorial on how to use combofix:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Post logs here for further analysis.

Sudeep
0
 
LVL 3

Expert Comment

by:karephre
ID: 33562734
0
 

Author Comment

by:brothertruffle880
ID: 33709383
There is no spyware on my PC.  Ran malwarebytes, and spybot.  Nothing.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Strange addresses from DHCP 8 100
IP Calculator 10 88
OneNote cannot connect to OneDrive 6 112
DHCP Lease/Reservations 3 31
cPanel is a Unix based web hosting control panel that provides a graphical interface and automation tools designed to simplify the process of hosting a web site. cPanel utilizes a 3 tier structure that provides functionality for administrators, rese…
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

713 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question