(09-11-2013, 08:15 AM)diana32 Wrote:

(02-09-2013, 03:12 AM)ArcaneFx Wrote: It's as easy as that.
Hope you find this useful.

-Arcane.cfg

Well is not bad ,and for the start -this is the right way to identify if you have malware on your computer.But .... there is a but - first of all -task manager don't show you all the process that are run,and some rat could dissalow this feature -i would add -to use the diagnostic program like process hacker and some program in the link below :
http://technet.microsoft.com/en-us/sysinternals/bb469930,
second - for you example i don't even watch what connection is establish since i see 127.0.0.1 as ip(127.0...1 is a home connection) - be carefull to explain that it could be a process running like you have the dropbox or like i have ,the kaspersky automatic update.If you kill a process that you see conection established may be some automatic update of av,sandboxies ,teamviewer connection thru internet - whit bad results.Is good for you to make a copy of the process every time when you install a new program and compare sometimes with the actual process running. You forgot to say that a malware running thru the feature printer and fax device sharing in internet -as countermeasure is to disallow this process going to lan icon -right click whith mouse -open network and sharing center -change adapter settings -go to your lan or wifi card -properties -and make sure to disallow the File and Printer Sharing for Microsoft Networks - in the middle box,and also the telnet .But , like i say is a good start for those how don't know how to identify a malware.