Do you have a question? Post it now! No Registration Necessary. Now with pictures!
- Posted on
- Possible infection by malware?
- Peter James
June 5, 2005, 9:41 pm
rate this thread
Using "whois" I came up with the following:
Abovenet Communications, Inc ABOVENET-6 (NET-208-184-0-0-1)
184.108.40.206 - 220.127.116.11
EZULA/KABANGA MFN-B423-208-185-211-64-27 (NET-208-185-211-64-1)
18.104.22.168 - 22.214.171.124
United Layer, Inc. UNITEDLAYER-1 (NET-209-237-224-0-1)
126.96.36.199 - 188.8.131.52
Alexa Internet ALEXA-INTERNET (NET-209-237-237-0-1)
184.108.40.206 - 220.127.116.11
Would this show an infection or trojan? I've run a scan using AdAware
and Spyblaster and neither show any spyware present, yet Proxomitorn
keeps stopping access to these sites. Anyone got any suggestions?
Remove AT to reply
Re: Possible infection by malware?
Why is software that you installed trying to connect to those addresses?
Someone with the handle of "Yosponge" posts a list of sites and addresses
to be concerned with. See the Usenet newsgroup 'alt.privacy.spyware' and
http://www.geocities.com/yosponge/blockips.txt . The 18.104.22.168/27
and 22.214.171.124/23 address ranges show up on the lists.
One would normally ask why you installed whatever software it is that
contains this malware, but it's your computer, not mine. Some software
you thought was interesting, or that some web site offered to install
for you is (as usual) infected. Happens all the time, which is why there
is a huge market for anti-malware products.