Question Virus?

[Quick_Nick]

In a random look at the router logs yesterday, I noticed something fishy and really looked into it tonight. The firewall log shows occasional connections through an open port that my mother uses for Vuze. This is followed by attempted connections FROM my mom's computer to countless IP addresses every second that don't even exist. This repeated for some time until I finally blocked the port. (Vuze wasn't running anyways, so unlikely to be the culprit for the connections) Then it went on trying to connect to random IPs for a short while but for the time being it is stuck in the stage of trying to connect to us through the now closed port. (now there are many REAL IPs trying to go through the port) Is this likely to be a virus? Some attack? Virus scanners found nothing, but obviously something is wrong with this specific computer. My mom generally downloads from a specific site that we've trusted for years. No promise that she didn't use something else though, and her work computer recently got a virus. (she uses a flash drive between each)
Edit: it's still cycling through attempted incoming connections and attempted outgoing connections)

 

[Kveldulf]

In a random look at the router logs yesterday, I noticed something fishy and really looked into it tonight. The firewall log shows occasional connections through an open port that my mother uses for Vuze. This is followed by attempted connections FROM my mom's computer to countless IP addresses every second that don't even exist. This repeated for some time until I finally blocked the port. (Vuze wasn't running anyways, so unlikely to be the culprit for the connections) Then it went on trying to connect to random IPs for a short while but for the time being it is stuck in the stage of trying to connect to us through the now closed port. (now there are many REAL IPs trying to go through the port) Is this likely to be a virus? Some attack? Virus scanners found nothing, but obviously something is wrong with this specific computer. My mom generally downloads from a specific site that we've trusted for years. No promise that she didn't use something else though, and her work computer recently got a virus. (she uses a flash drive between each)

Its possible that the virus is hitching a ride on the flash drive. It does sound like viruses though. Should I assume that you've already done a full scan with Malwarebytes in safe mode?

If I had some network traffic, I may be able to give you an idea what all the attempted connections are about, but I'm not about to say open the port back up. Keep an eye on the connections, and see if anything else is connected that you can't account for.

 

[Quick_Nick]

I haven't yet run Malwarebytes. We were running other scans but the power went out.... So I won't worry about it for now.