zappe

Seems fine, thanks

GVDisplayLib.rar

2012/06/07 21:07:13 +0200 ZPP zappe IP-BLOCK 91.201.60.30 (Type: outgoing, Port: 51139, Process: chrome.exe) 2012/06/07 21:07:21 +0200 ZPP zappe IP-BLOCK 91.201.60.30 (Type: outgoing, Port: 51152, Process: chrome.exe) 2012/06/07 21:07:21 +0200 ZPP zappe IP-BLOCK 91.201.60.30 (Type: outgoing, Port: 51153, Process: chrome.exe) 2012/06/07 21:07:21 +0200 ZPP zappe IP-BLOCK 91.201.60.30 (Type: outgoing, Port: 51154, Process: chrome.exe)

Any news?

2012/05/04 16:24:21 +0200 ZPP zappe IP-BLOCK 212.97.134.16 (Type: outgoing, Port: 64830, Process: chrome.exe)

Why is this blocked? 2012/05/02 07:43:06 +0200 ZPP zappe IP-BLOCK 195.234.4.62 (Type: outgoing, Port: 54690, Process: chrome.exe)

Anything on this?

2012/01/26 19:53:29 +0100 ZPP zappe IP-BLOCK 200.122.168.169 (Type: outgoing, Port: 57477, Process: chrome.exe) www.trendycasino.com

2012/01/23 15:05:03 +0100 ZPP zappe IP-BLOCK 91.206.200.30 (Type: outgoing, Port: 61942, Process: chrome.exe) 2012/01/23 15:05:19 +0100 ZPP zappe IP-BLOCK 91.206.200.30 (Type: outgoing, Port: 61946, Process: chrome.exe) 2012/01/23 15:05:19 +0100 ZPP zappe IP-BLOCK 91.206.200.30 (Type: outgoing, Port: 61947, Process: chrome.exe) www.hamalia.ua

So if bots are gone they will be removed?

Why isn't all blocked then?

A few of the ips of irc.undernet.org is blocked. Name: irc.undernet.org Addresses: 66.252.29.2 70.33.251.254 94.125.182.255 95.141.29.22 130.237.188.216 194.109.20.90 208.83.20.130 64.18.128.86 66.198.80.67 19:17:01 zappe IP-BLOCK 94.125.182.255 (Type: outgoing, Port: 52699, Process: mirc.exe) 19:03:40 zappe IP-BLOCK 66.252.29.2 (Type: outgoing, Port: 51077, Process: mirc.exe) 19:03:08 zappe IP-BLOCK 208.83.20.130 (Type: outgoing, Port: 50984, Process: mirc.exe) 19:02:36 zappe IP-BLOCK 130.237.188.216 (Type: outgoing, Port: 50936, Process: mirc.exe) 19:02:12 zappe IP-BLOCK 194.109.20.90 (Type: outgoing, Port: 50878, Process: mirc.exe) 19:01:40 zappe IP-BLOCK 64.18.128.86 (Type: outgoing, Port: 50827, Process: mirc.exe) Can this be solved?

Isn't this a false positive? I got it will playng on Expekt.com Casino. File is attached. Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Database version: 8351 Windows 6.1.7601 Service Pack 1 Internet Explorer 9.0.8112.16421 2011-12-11 19:15:43 mbam-log-2011-12-11 (19-15-38).txt Scan type: Full scan (C:\|D:\|) Objects scanned: 810862 Time elapsed: 1 hour(s), 52 minute(s), 8 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 1 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\expekt (PUP.Casino.Gen) -> No action taken. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: c:\microgaming\Casino\Expekt\install.exe (PUP.Casino.Gen) -> No action taken. install.rar

Any news?

http://forums.malwarebytes.org/index.php?showtopic=97252

22:42:42 zappe IP-BLOCK 78.129.142.67 (Type: outgoing, Port: 55001, Process: chrome.exe) 22:42:42 zappe IP-BLOCK 78.129.142.67 (Type: outgoing, Port: 55002, Process: chrome.exe) 22:42:42 zappe IP-BLOCK 78.129.142.67 (Type: outgoing, Port: 55005, Process: chrome.exe) daemon-tools.cc 20:06:18 zappe IP-BLOCK 77.247.179.66 (Type: outgoing, Port: 52900, Process: chrome.exe) 20:06:18 zappe IP-BLOCK 77.247.179.66 (Type: outgoing, Port: 52901, Process: chrome.exe) 20:06:18 zappe IP-BLOCK 77.247.179.83 (Type: outgoing, Port: 52902, Process: chrome.exe) 20:06:18 zappe IP-BLOCK 77.247.179.83 (Type: outgoing, Port: 52903, Process: chrome.exe) 20:06:18 zappe IP-BLOCK 77.247.179.66 (Type: outgoing, Port: 52904, Process: chrome.exe) 20:06:18 zappe IP-BLOCK 77.247.179.66 (Type: outgoing, Port: 52905, Process: chrome.exe) 20:06:18 zappe IP-BLOCK 77.247.179.83 (Type: outgoing, Port: 52906, Process: chrome.exe) 20:06:18 zappe IP-BLOCK 77.247.179.83 (Type: outgoing, Port: 52907, Process: chrome.exe) 20:06:18 zappe IP-BLOCK 77.247.179.66 (Type: outgoing, Port: 52908, Process: chrome.exe) 20:06:18 zappe IP-BLOCK 77.247.179.83 (Type: outgoing, Port: 52909, Process: chrome.exe) wiziwig.tv

And the file. utt949.tmp.zip

When updating uTorrent I got this detection.. 07:27:04 zappe DETECTION C:\Users\zappe\AppData\Local\Temp\utt949.tmp.exe Trojan.Pakes ALLOW Attaching the file

I see your point, I just said that since they don't keeps logs they can't suspend users. They prefer anonymity like TOR or I2P. As long as they are not obligated by law to keep logs I don't think they will start responding. I guess I have to add it to ignore list.

Well, since they don't log they can't do anything. Anyway, can I add a ip addess or range manually to ignore list?

80.67.13.* is a ip-range belonging to VPN provider www.privatvpn.se. This is the ip you get when using their service. Can you please white list them?

19:20:29 zappe IP-BLOCK 95.143.206.13 (Type: outgoing, Port: 57476, Process: avp.exe) Name: www.slitz.se Address: 95.143.206.13

Thanks, interesting that a security company uses range like that.

Any news?