"@peerdistsh.dll" things in allowed programs in firewall settings?

[Wizzlbang]

Had a look at my firewall and noticed these things in there, there are more in the advanced settings



googling around, I could only find two or three other people posting about something like this, but all of them had or had used Windows Repair, including me. Are they related?

[Wizzlbang]

I can't remove them from the list, either

[Boggin]

Shane will help you with this when he gets back on Monday - work commitments permitting.

[Wizzlbang]

Damn, gonna be gone for like a week on monday 

Oh well, laptops not going anywhere, I can wait

[Boggin]

If you aren't back until Friday then you will have to wait until the following Monday, but give the thread a Bump when you get back.

[Wizzlbang]

I'll probably bring the laptop with me, unsure if I'll have time to check on the thread though

[Wizzlbang]

just a quick update, I went into advanced settings and blocked these just in case they might be something malicious, but now there are six of them in the normal settings, so thats weird

[Shane]

From what I can find it was installed by a 3rd party program, not sure if it is a virus or not but better to do some scans with adwcleaner and such

I found this thread from 2013 about the same file
http://www.bleepingcomputer.com/forums/t/487070/trojans/page-3

Shane

[Wizzlbang]

yeah, thats what I found. I haven't installed any 3rd party programs recently aside from some security things. Is it possible any of those made them? it would make sense since the thread had the op installing some of the same programs

[Julian]

can you export and upload:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy

and i'll find the key that runs to it and remove it or

if you want to reset your whole fire wall setting just type this in admin mode cmd:

Code: [Select]

netsh advfirewall reset