How to find out who has established and unauthorized connection to my computer & remove

consciousmatrix

Estimable
Jun 28, 2015
4
0
4,510
I recently discovered malware, spyware on my computer and when looking for sources, a remote connection enabled tech person showed me an "Established Connection" that I did not authorize as the likely source of the problems I was having. Just prior to that, when troubleshooting internet connection problems via telephone with my IP Centurylink, she had me open the IE browser (one that I have not used for years) and immediately I got a LOUD verbal and visual warning on that page, saying that my computer was infected and not to use it until I called a certain number. I am wondering, now, whether this was truly an Hewlett Packard authorized phone number & tech person, as the whole remote connection session was obviously "leading" to it's ultimate conclusion and that was: "Buy their $100.00 "Microsoft Authorized Fix and Protection" otherwise they could not help me remove the connection or malware. They told me not to buy anything or check my accounts online until I did this. I cannot reach anyone at that same number now. It is always busy, even on Sunday. Sorry to be long winded. I am still somewhat of a computer novice. How do I remove the Unauthorized Connection and the Malware/Spyware. If the answer is to change my Modem Password, I have done that recently through my IP Provider, Centurylink. Should I do it that way again?
 
Solution
Look like this is an heavily infested computer. I wouldn't be doing any banking payment on that computer until it is thoroughly clean.

Run all this free programs:
http://www.bleepingcomputer.com/download/tdsskiller/
http://www.bleepingcomputer.com/download/roguekiller/
http://www.bleepingcomputer.com/download/junkware-removal-tool/
http://www.bleepingcomputer.com/download/adwcleaner/
http://www.bleepingcomputer.com/download/hitmanpro/
http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/

If some of your programs isn't working after running all of the scans, make sure the program is legit before downloading and reinstalling it again from a trusted source of their official website.

The phone number is adware virus trying...
My first reaction to this is that you are being suckered by said "remote connection enabled tech person."

To remove malware / spyware, download or purchase any of the fine free or paid products for that purpose and run them on your machine. Start by reading some of the sticky posts that remain at the top of this forum; people with a lot of experience have put a lot of work into them.

What version of the operating system do you have? Are you currently running any security software? I hate to ask, but do you have enough computer experience to (as a last resort) copy all your data off the machine and do a clean OS install?
 

consciousmatrix

Estimable
Jun 28, 2015
4
0
4,510
Thank you for your kind reply. I agree, it is very clear what that whole thing was about. I do think that I have malware and will download and apply one of the free fixes. I was just curious how to find and perhaps, in someway (punish) the unauthorized person on my computer and/or their malware or spyware etc. I have Win 7 64bit I don't even want to open the IE browser again because I know that same message will come blaring at me. I have Microsoft Security Essentials that I donwloaded myself. Not sure about network security on my computer.
 

consciousmatrix

Estimable
Jun 28, 2015
4
0
4,510


Looks like I replied to you in the wrong place, below.
Thank you for your kind reply. I agree, it is very clear what that whole thing was about. I do think that I have malware and will download and apply one of the free fixes. I was just curious how to find and perhaps, in someway (punish) the unauthorized person on my computer and/or their malware or spyware etc. I have Win 7 64bit I don't even want to open the IE browser again because I know that same message will come blaring at me. I have Microsoft Security Essentials that I donwloaded myself. Not sure about network security on my computer.
Guess I will keep looking. I don't want to have to go through the whole process of starting over again. I have done it several times in the past.
- See more at: http://www.tomshardware.com/answers/id-2700069/find-established-unauthorized-connection-computer-remove.html#sthash.gC7iXxlu.dpuf
 

CWEric

Estimable
Jun 13, 2015
170
0
4,710
Look like this is an heavily infested computer. I wouldn't be doing any banking payment on that computer until it is thoroughly clean.

Run all this free programs:
http://www.bleepingcomputer.com/download/tdsskiller/
http://www.bleepingcomputer.com/download/roguekiller/
http://www.bleepingcomputer.com/download/junkware-removal-tool/
http://www.bleepingcomputer.com/download/adwcleaner/
http://www.bleepingcomputer.com/download/hitmanpro/
http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/

If some of your programs isn't working after running all of the scans, make sure the program is legit before downloading and reinstalling it again from a trusted source of their official website.

The phone number is adware virus trying to scare you to paying for scam, this is what your call would had happen:
https://www.youtube.com/watch?v=s60jLxInYb4
 
Solution

consciousmatrix

Estimable
Jun 28, 2015
4
0
4,510

THANK YOU!!!! I JUST CHANGED MY NETWORK PASSWORD AND RAN A 3 HOUR MICROSOFT MALWARE SCAN AND REMOVAL THAT DETECTED NO MALWARE. IP SAID THAT SHE SAW SEVERAL DEVICES THAT WERE ABLE TO ACCESS MY COMPUTER AND NOW THEY ARE GONE. IF I CONTINUE TO HAVE PROBLEMS I WILL DEFINITELY RUN THOSE LINKS YOU SO GRACIOUSLY PROVIDED!! i AM GRATEFUL THAT YOU AND WYOMINGKNOTT HAVE HELPED ME TREMENDOUSLY. I HAVE LEARNED A LOT TODAY! AGAIN, THANK YOU!!