|I'm completely out of ideas with this. Normally I consider myself decent with securing my own computer but this thing has me stumped. I'll try to provide everything I've learn, let me know if you need anything else.|
First of, something in my PC (Windows 7 x64) is sending out requests to a "FAST Search & Transfer" multiple times a minute. It has been non-stop for days. The reason I found out was because of PeerBlock.
FAST Search & Transfer seems to be a Norwegian company that has been bought-out/partnered with Microsoft which makes me weary. The IP addresses are 188.8.131.52 and 184.108.40.206. It seems to be scanning ports because it uses many at a time.
I've ran Avast, Spybot, MalwareBytes, SuperAntiSpyware and even tried figuring out which process is sending them with Sysinternal's TCPView. TCPView shows the connections as "System" which doesn't help identify it.
I've always kept a handle on my start-ups and didn't see anything new or of interest. In safe-mode, the bug doesn't seem to run.
I'm out of ideas now. Any help would be greatly appreciated.