I recently had a Trojan and a large amount of viruses on my computer. I went through the removal process but I am having trouble with some odd behaviour still on the machine. Firstly, when using TCPview from sysinternals there is a connection that keeps appearing that connects to winlogon.exe process. Nothing seems to result from this and the connection closes within a minute usually but it still has me concerened
Second, whenever I insert a USB stick it will put 2 files onto it automatically. One is Autorun.inf, and the other is a randomly named .exe file that the autorun.inf points to.
MBAM and SAS, both updated today, detect nothing on a full scan.
Anyone have any insight into this?