Suspicious autoruns

[Maxstar]

If you suspect an infection, please follow the Malware Removal Posting Instructions and start a thread in that section.

 

[poisonedSYS]

I was chatting with the CenturyLink tech support because at 4:21:51 PM a TCP port scan attack was performed to me through their server with this IP 211.72.75.108 and they said I have to call 8002441111 to have the IP from the attacker

 

[Maxstar]

Please perform the Malware Removal Posting Instructions first, then a Security Expert will analyze your logs! CenturyLink tech support sounds like a scam, so please provide the logs of FRST in a new thread to review. Without these log files we're unable to help you further.