computer help: What is this? - Help.com



This post left anonymously

Editors:

What is this?

http://127.0.0.1:4664/search?q=jswtrayutil&flags=68&s=_mYYRkF1kARaK7wG6n5Bm FTy_aQ

This open post was written 2 years ago | V/U/S: 838, 7, 3 | Edit Post | Leave a reply | Report Post


Reciprocity (0) Reciprocation Failure -- The poster has NOT helped anyone else yet!

Since writing this post Anonymous may have helped people, but has not within the last 4 days.

Post Tags (9)

Replies (7)

Where were you?

Click and drag to move the map around. FAQ: How we place people on this map »
You can also watch events on Help.com as they happen
Mouse over the map for 2 seconds to see an expanded, interactive view

AVanover offline Verified User (2 years, 6 months) Long Term User Shouts: 4 #
An Unknown Location | 2 years ago (28 minutes after post)

127.0.0.1 is a loopback connection. That means it’s a server which is installed on your own computer and is only accessible by you. By the looks of the URI: it appears that you have a server running php via some third-party application. I also notice the string “jswtrayutil” after “q=” which is probably a reference to the “Jumpstart Wireless Filter” process.

Just to be sure though. Download PULIST from Microsoft here: http://download.microsoft.com/downloa… Run through the setup until it’s finished. Now open up command prompt (WINKEY+R, enter “cmd”). Enter the following: pulist |find “4664″. This should help you locate the process utilizing this port. If it’s “jswtrayutil.exe” then I doubt it’s malware. If not then I suggest you open up task manager and kill it.

Quote this reply Report this reply to moderators
AVanover offline Verified User (2 years, 6 months) Long Term User Shouts: 4 #
An Unknown Location | 2 years ago (32 minutes after post)

AVanover wrote:
127.0.0.1 is a loopback connection. That means it’s a server which is installed on your own computer and is only accessible by you. By the looks of the URI: it appears that you have a server running php via some third-party application. I also notice the string “jswtrayutil” after “q=” which is probably a reference to the “Jumpstart Wireless Filter” process.

Just to be sure though. Download PULIST from Microsoft here: http://download.microsoft.com/downloa… Run through the setup until it’s finished. Now open up command prompt (WINKEY+R, enter “cmd”). Enter the following: pulist |find “4664″. This should help you locate the process utilizing this port. If it’s “jswtrayutil.exe” then I doubt it’s malware. If not then I suggest you open up task manager and kill it.

The command should be: pulist |find /i “4664″. The “i” switch is important.

Quote this reply Report this reply to moderators

AVanover edited this post 2 years ago. Read the previous text »

AVanover changed the tags on this post: they were "" 2 years ago.

AVanover changed the tags on this post: they were "computer, Intranet, malware" 2 years ago.

veiledvenus offline Verified User (1 year, 12 months) Long Term User Shouts: 0 #
An Undisclosed Location | 1 year, 12 months ago (2 weeks, 2 days after post)

so what happens if the malware running that particular loopback on my computer (it’s a reinfection, so I’m sure it’s a botkit and bootkit again) keeps terminating pulist before it can tell me what process is using that port?

Quote this reply Report this reply to moderators

veiledvenus changed the tags on this post: they were "computer, Intranet, malware" 1 year, 12 months ago.

Invite Others to Help

A logged in and verified Help.com member has the ability to setup a Friends List and invite others to help with posts.