Whenever I start Ffx 3.6.13, my firewall alerts me that firefox.exe is trying to connect TCP Out to 127.0.0.1:443(https). Three or 4 seconds later, alerts for jqsnotify.exe TCP out to 127.0.0.1:5152. Others, incl. AAWService.exe (Ad-Aware) (when commanded to open or update). On a Windows startup and on restart, during the login to my Admin user account, Explorer.exe tries to connect 127.0.0.1.
Please check whether those find anything
OK, Gryllida, thanks, will try. I just now updated/corrected my initial post again, FYI.
P.S. - (a) The Forum window displayed to me AFTER posting my opening, is lacking most of the info I posted there, including the Troubleshooting details with critically important things. Are you seeing all those data, or is your view restricted as mine, to a single paragraph ending with APAgent.exe? (b) Do you know how many characters are allowed, in the first text entry window under the subject question? Mozilla.org ought to post their capacities by each window.
Stage 1 Result:
Your link to microsoft.com offered me a download of the Windows MRT which I already updated per Patch Tuesday and have run it a couple of times since then. I have been updating and running it every month for years. It hardly ever reports finding anything, and it didn't report finding nothing, and I couldn't find any results file on the system drive. Any comments?
Well, back to work. Windows Malicious Software Removal Tool (windows-kb890830-v3.16.exe) (February 2011) scanned the short scan and found nothing - nada. I am proceeding now to download another of your recommended scanners, and will report result.
BTW - The Forum window displayed to me AFTER posting my opening, is lacking most of the info I posted there, including the Troubleshooting details with critically important things including local system description. It is irritating, having done all that work to give a clear and complete picture of the issue - that Mozilla.org should set up a less than fully functional forum, here. Are you seeing all those data, or is your view as restricted as mine, to a single paragraph ending with "Explorer.exe tries to connect 127.0.0.1."? Please tell me, while I am working.
127.0.0.1 is a local address (local host). Firefox uses that loopback connection to communicate with the Software Security Device.
Gryllida, "seems to be full" is a bit obscure to me. One guess I could make is, you know what "full" means in terms of characters allowed, although I do not. (Each of these message balloons stretches in size to contain the words it contains - so any inflated balloon is always "full." ) How full is full? How many chars.?
Gryllida, I ran Spybot a while ago, and it found a sizeable number of items that were invalid shortcuts, and I authorized removal of those. Haven't seen any adverse reaction yet. So, then I ran a registry-only scan, and it found three red items in Internet Explorer keys, one of those in HKLM and the other two in different userpaths in HKU. Path of each is HKLM\(user account code S-1-5-xxx)... or "HKU\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_