nosake
-
Posts
18 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by nosake
-
-
Aloha,
I just had an interesting online chat. I used the www.ip-lookup.net link you provided which, indeed, revealed that the addresses belonged to SoftLayer. Their site provided Online Chat so that's what I did. What do you make of it?
You are now chatting with 'Jimmy V'
Jimmy V: Hello, thank you for contacting SoftLayer. How can I help you today?
Tom: I would like to know why my computer is trying to communicate with your IP address? Gratefully, MBAM is blocking it, but who the hell are you?
Jimmy V: We are a hosting provider. If you have someone trying to access your ip address, please send logs of the information to our abuse team.
Jimmy V: abuse@softlayer.com
Jimmy V: Your email will server as documentation against the customer.
Tom: Are you associated with HostGator? GoDaddy?
Jimmy V: Hostgator is one of our resellers
Tom: Well, that might explain things. I host several sites on HostGator.
Tom: Thanks for the info. I'll follow up with HG.
-
I was able to remove the old chrome version after rebooting.
-
Hope you can enlarge and read the attached jpg. The chrome uninstaller doesn't work. I'm thinking to dump chrome but retain my profile and just reinstall it.
I updated FireFox.
I deleted ComboFix and ran the OTL execution as well.
Looking forward to hearing from you tomorrow morning.
Tom
-
Hope you can enlarge and read the attached jpg. The chrome uninstaller doesn't work. I'm thinking to dump chrome but retain my profile and just reinstall it.
I updated FireFox.
I deleted ComboFix and ran the OTL execution as well.
Looking forward to hearing from you tomorrow morning.
Tom
-
Hope you can enlarge and read the attached jpg. The chrome uninstaller doesn't work. I'm thinking to dump chrome but retain my profile and just reinstall it.
I updated FireFox.
I deleted ComboFix and ran the OTL execution as well.
Looking forward to hearing from you tomorrow morning.
Tom
-
Results of screen317's Security Check version 0.99.62
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 9
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Microsoft Security Essentials
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Malwarebytes Anti-Malware version 1.75.0.1300
Adobe Flash Player 11.6.602.180
Mozilla Firefox 19.0.2 Firefox out of Date!
Mozilla Thunderbird (17.0.5)
Google Chrome 26.0.1410.43
Google Chrome 26.0.1410.64
````````Process Check: objlist.exe by Laurent````````
Microsoft Security Essentials MSMpEng.exe
Microsoft Security Essentials msseces.exe
Malwarebytes Anti-Malware mbamservice.exe
Malwarebytes Anti-Malware mbamgui.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 12% Defragment your hard drive soon! (Do NOT defrag if SSD!)
````````````````````End of Log``````````````````````
-
Softlayer rings a bell. I think that's one of the problem sites mentioned in the Google Chrome exploit. Anyway, let me run the stuff you mentioned. I'll get back to you after.
-
Sure, here are a couple of day's worth. I'm glad MBAM is doing its job but am concerned that something has infiltrated my system and is attempting to dispatch data. Is that the case or just a coincidence that there has been a burst of activity lately?
Can I dump all the stuff you suggested I download and run, as well as the generated data?
Btw, what is the norm in terms of compensating you for your assistance? Give me a figure.
-
OK, all done with ComboFix. I have restored my security programs and Firewall, too.
-
Google Chrome. I read earlier today that Chrome was having some trouble, but I don't want to bet the farm that the Bleeping Computer link is safe, do you?
-
Interestingly enough, I tried downloading ComboFix from Bleeping Computer as suggested, but both times received a warning message about the downloaded file so I opted to discard it. What's up with that?
-
OK, here you go. AFAIC, we can dump Firefox altogether. I use Chrome and keep FF as a backup.
-
-
I've run scans with MBAM and MBAR. Caught some trojans a couple days back but continue to have outgoing IP Blocking problems when Chrome is running.
-
Aloha,
I have found Commission Junction to be a dishonest company. I could have sworn CleverBridge was the affiliate contractor for MBAM. If the latter, I'm interested. If the former, not at all.
-
Have any Windows users tried MBAM without AV protection?
-
Me too!
outgoing IP blocks in Chrome
in Resolved Malware Removal Logs
Posted
OK, thanks for your help. I'll deal directly with SoftLayer now.