Jump to content

Backdoor Trojan and IP Addresses blocked


SJE

Recommended Posts

Posted earlier but added a comment and not sure if that appears like I've gotten a response. I haven't and things are getting worse.

MBAM found trojans last few days. Constant stream of IP addresses blocked. AVG found backdoor Trojan this morning during startup that appears to be in Malwarebytes dir? Could really use some help.

New DDS run today:

DDS (Ver_2011-08-26.01) - NTFSx86

Internet Explorer: 8.0.6001.18702

Run by Susan Edson at 11:26:48 on 2011-12-13

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.501 [GMT -8:00]

.

AV: Norton 360 Premier Edition *Enabled/Updated* {E10A9785-9598-4754-B552-92431C1C35F8}

FW: Norton 360 Premier Edition *Enabled*

.

============== Running Processes ===============

.

C:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

svchost.exe

svchost.exe

C:\WINDOWS\System32\WLTRYSVC.EXE

C:\WINDOWS\System32\bcmwltry.exe

C:\WINDOWS\system32\spoolsv.exe

svchost.exe

C:\WINDOWS\eHome\ehRecvr.exe

C:\WINDOWS\eHome\ehSched.exe

C:\WINDOWS\system32\svchost.exe -k hpdevmgmt

C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

C:\WINDOWS\System32\svchost.exe -k HPZ12

C:\WINDOWS\System32\svchost.exe -k HPZ12

svchost.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\9.0.1\ToolbarUpdater.exe

C:\WINDOWS\system32\svchost.exe -k HPService

C:\WINDOWS\system32\dllhost.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Dell\QuickSet\Quickset.exe

C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files\AVG Secure Search\vprot.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\WinZip\WZQKPICK32.EXE

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

C:\Program Files\AVG\AVG2012\avgwdsvc.exe

C:\Program Files\AVG\AVG2012\avgnsx.exe

C:\Program Files\AVG\AVG2012\avgemcx.exe

C:\Program Files\AVG\AVG2012\avgrsx.exe

C:\Program Files\AVG\AVG2012\avgcsrvx.exe

C:\Program Files\AVG\AVG2012\avgtray.exe

C:\Program Files\AVG\AVG2012\avgui.exe

C:\WINDOWS\System32\svchost.exe -k HTTPFilter

C:\WINDOWS\System32\ping.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://xfinity.comcast.net/?cid=mtmh07192011

uSearch Bar = hxxp://toolbar.inbox.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=%tb_id&%language

uURLSearchHooks: H - No File

uURLSearchHooks: WinZipBar Toolbar: {50fafaf0-70a9-419d-a109-fa4b4ffd4e37} - c:\program files\winzipbar\prxtbWinZ.dll

mURLSearchHooks: H - No File

BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: AVG Safe Search: {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg2012\avgssie.dll

BHO: WinZipBar Toolbar: {50fafaf0-70a9-419d-a109-fa4b4ffd4e37} - c:\program files\winzipbar\prxtbWinZ.dll

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: PageRage Toolbar: {9565115d-c7d6-46d3-bd63-b67b481a4368} - c:\program files\pagerage\prxtbPag2.dll

BHO: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - c:\program files\avg secure search\9.0.0.18\AVG Secure Search_toolbar.dll

BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

BHO: Bing Bar Helper: {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "c:\program files\microsoft\bingbar\BingExt.dll"

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn0\YTSingleInstance.dll

TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll

TB: PageRage Toolbar: {9565115d-c7d6-46d3-bd63-b67b481a4368} - c:\program files\pagerage\prxtbPag2.dll

TB: Bing Bar: {8dcb7100-df86-4384-8842-8fa844297b3f} - "c:\program files\microsoft\bingbar\BingExt.dll"

TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File

TB: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - c:\program files\avg secure search\9.0.0.18\AVG Secure Search_toolbar.dll

TB: WinZipBar Toolbar: {50fafaf0-70a9-419d-a109-fa4b4ffd4e37} - c:\program files\winzipbar\prxtbWinZ.dll

TB: {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File

TB: {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - No File

{e7df6bff-55a5-4eb7-a673-4ed3e9456d39}

uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe

uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background

uRun: [Google Update] "c:\documents and settings\susan edson\local settings\application data\google\update\GoogleUpdate.exe" /c

uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet

mRun: [AVG_TRAY] "c:\program files\avg\avg2012\avgtray.exe"

mRun: [Dell QuickSet] c:\program files\dell\quickset\Quickset.exe

mRun: [RIMBBLaunchAgent.exe] c:\program files\common files\research in motion\usb drivers\RIMBBLaunchAgent.exe

mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [Malwarebytes' Anti-Malware] "c:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray

mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"

mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime

mRun: [vProt] "c:\program files\avg secure search\vprot.exe"

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe

StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\winzip~1.lnk - c:\program files\winzip\WZQKPICK32.EXE

IE: {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - c:\program files\pokerstars\PokerStarsUpdate.exe

IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

IE: {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - c:\program files\pokerstars.net\PokerStarsUpdate.exe

IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL

LSP: mswsock.dll

DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.5.0.cab

DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} - hxxps://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab

DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} - hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-31-0.cab

DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

DPF: {EBF85371-A38F-485B-B28F-0B4C82D25937} - hxxp://update.hpphoto.com/download/HPSWUpdate.ocx

TCP: DhcpNameServer = 68.87.76.182 68.87.78.134

TCP: Interfaces\{80611112-0AC3-4098-AB9D-242F43E56BCA} : DhcpNameServer = 68.87.76.182 68.87.78.134

Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\program files\logitech\desktop messenger\8876480\program\GAPlugProtocol-8876480.dll

Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - c:\program files\avg\avg2012\avgpp.dll

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll

Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\9.0.1\ViProtocol.dll

Notify: AtiExtEvent - Ati2evxx.dll

Notify: GoToAssist - c:\program files\citrix\gotoassist\514\G2AWinLogon.dll

SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

.

============= SERVICES / DRIVERS ===============

.

R0 AVGIDSEH;AVGIDSEH;c:\windows\system32\drivers\AVGIDSEH.sys [2010-9-13 23120]

R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2010-9-7 32592]

R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2010-12-8 230608]

R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2010-9-7 40016]

R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2010-11-12 295248]

R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2012\AVGIDSAgent.exe [2011-10-12 4433248]

R2 avgwd;AVG WatchDog;c:\program files\avg\avg2012\avgwdsvc.exe [2011-8-2 192776]

R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-3-16 366152]

R2 McrdSvc;Media Center Extender Service;c:\windows\ehome\mcrdsvc.exe [2005-8-5 99328]

R2 vToolbarUpdater;vToolbarUpdater;c:\program files\common files\avg secure search\vtoolbarupdater\9.0.1\ToolbarUpdater.exe [2011-12-9 855904]

R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\AVGIDSDriver.sys [2010-8-3 134608]

R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\AVGIDSFilter.sys [2010-8-3 24272]

R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\AVGIDSShim.sys [2010-8-3 16720]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-3-16 22216]

S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\avg\avg10\toolbar\ToolbarBroker.exe [2011-5-20 1025352]

S4 BBSvc;Bing Bar Update Service;c:\program files\microsoft\bingbar\BBSvc.EXE [2011-2-28 183560]

.

=============== Created Last 30 ================

.

2011-12-13 15:51:47 41272 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys

2011-12-13 01:33:35 -------- d-----w- c:\documents and settings\susan edson\local settings\application data\WinZip

2011-12-13 01:33:15 -------- d-----w- c:\documents and settings\susan edson\local settings\application data\WinZipBar

2011-12-13 01:33:11 -------- d-----w- c:\program files\WinZipBar

2011-12-11 17:15:04 -------- d-----w- C:\output

2011-12-10 00:31:35 -------- d-----w- c:\documents and settings\susan edson\application data\AVG Secure Search

2011-12-09 23:49:17 -------- d-----w- c:\windows\system32\cache

2011-12-09 23:49:16 -------- d-----w- c:\documents and settings\all users\application data\AVG Secure Search

2011-11-29 02:17:38 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin7.dll

2011-11-29 02:17:38 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin6.dll

2011-11-29 02:17:38 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin5.dll

2011-11-29 02:17:38 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin4.dll

2011-11-29 02:17:38 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin3.dll

2011-11-29 02:17:38 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin2.dll

2011-11-29 02:17:38 159744 ----a-w- c:\program files\internet explorer\plugins\npqtplugin.dll

.

==================== Find3M ====================

.

2011-11-13 15:34:47 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-10-24 22:29:02 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx

2011-10-24 22:29:02 69632 ----a-w- c:\windows\system32\QuickTime.qts

2011-10-07 13:23:48 230608 ----a-w- c:\windows\system32\drivers\avgldx86.sys

2011-10-04 13:21:42 16720 ----a-w- c:\windows\system32\drivers\AVGIDSShim.sys

.

============= FINISH: 11:28:58.65 ===============

AVG Log that found Backdoor Trojan:

Trojan horse BackDoor.Generic14.CCGD;"c:\WINDOWS\system32\drivers\i8042prt.sys";"Object is white-listed (critical/system file that should not be removed)";"12/13/2011, 10:17:03 AM";"file";"C:\DOCUME~1\SUSANE~1\LOCALS~1\Temp\HouseCall\housecall.bin"

Trojan horse Generic26.YGE;"c:\Documents and Settings\Susan Edson\Local Settings\Temp\nnnv0.1638987781197101.exe";"Moved to Virus Vault";"12/13/2011, 10:15:45 AM";"file";"C:\DOCUME~1\SUSANE~1\LOCALS~1\Temp\HouseCall\housecall.bin"

Trojan horse Generic26.YGE;"c:\Documents and Settings\Susan Edson\Local Settings\Temp\gggf0.7527398482583296.exe";"Moved to Virus Vault";"12/13/2011, 10:14:13 AM";"file";"C:\DOCUME~1\SUSANE~1\LOCALS~1\Temp\HouseCall\housecall.bin"

Trojan horse BackDoor.Generic14.CCGD;"c:\WINDOWS\system32\drivers\i8042prt.sys";"Object is white-listed (critical/system file that should not be removed)";"12/13/2011, 10:03:45 AM";"file";"C:\DOCUME~1\SUSANE~1\LOCALS~1\Temp\HouseCall\housecall.bin"

Found Tracking cookie.Pointroll;"c:\Documents and Settings\NetworkService\Cookies\system@pointroll[2].txt";"";"12/13/2011, 10:01:07 AM";"file";"C:\WINDOWS\system32\ping.exe"

Found Tracking cookie.247realmedia;"c:\Documents and Settings\NetworkService\Cookies\system@247realmedia[1].txt";"";"12/13/2011, 10:00:07 AM";"file";"C:\WINDOWS\system32\ping.exe"

Found Tracking cookie.Ru4;"c:\Documents and Settings\NetworkService\Cookies\system@ru4[2].txt";"";"12/13/2011, 9:59:43 AM";"file";"C:\WINDOWS\system32\ping.exe"

Found Tracking cookie.Pro-market;"c:\Documents and Settings\NetworkService\Cookies\system@pro-market[1].txt";"";"12/13/2011, 9:58:20 AM";"file";"C:\WINDOWS\system32\ping.exe"

Found Tracking cookie.Adtech;"c:\Documents and Settings\NetworkService\Cookies\system@adtech[1].txt";"";"12/13/2011, 9:57:46 AM";"file";"C:\WINDOWS\system32\ping.exe"

Found Tracking cookie.Realmedia;"c:\Documents and Settings\NetworkService\Cookies\system@realmedia[2].txt";"";"12/13/2011, 9:54:59 AM";"file";"C:\WINDOWS\system32\ping.exe"

Trojan horse BackDoor.Generic14.CCGD;"c:\WINDOWS\system32\drivers\i8042prt.sys";"Object is white-listed (critical/system file that should not be removed)";"12/13/2011, 9:54:43 AM";"file";"C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe"

Protection Log 122/10:

07:57:36 Susan Edson MESSAGE Protection started successfully

07:57:46 Susan Edson MESSAGE IP Protection started successfully

15:26:36 (null) MESSAGE Protection started successfully

15:26:54 (null) ERROR Scheduled update failed: No address found failed with error code 11004

15:27:27 Susan Edson MESSAGE IP Protection started successfully

16:13:34 Susan Edson DETECTION C:\Documents and Settings\Susan Edson\Local Settings\Temp\0.4521757350551361.exe Exploit.Drop.4 QUARANTINE

16:13:35 Susan Edson DETECTION C:\DOCUMENTS AND SETTINGS\SUSAN EDSON\LOCAL SETTINGS\TEMP\0.4521757350551361.EXE Exploit.Drop.4 DENY

16:13:35 Susan Edson DETECTION C:\Documents and Settings\Susan Edson\Local Settings\Temp\0.4521757350551361.exe Exploit.Drop.4 DENY

16:13:35 Susan Edson DETECTION C:\Documents and Settings\Susan Edson\Local Settings\Temp\0.4521757350551361.exe Exploit.Drop.4 DENY

16:13:45 Susan Edson DETECTION C:\Documents and Settings\Susan Edson\Local Settings\Temp\0.2842671284968712.exe Exploit.Drop.4 QUARANTINE

16:13:45 Susan Edson DETECTION C:\DOCUMENTS AND SETTINGS\SUSAN EDSON\LOCAL SETTINGS\TEMP\0.2842671284968712.EXE Exploit.Drop.4 DENY

16:13:45 Susan Edson DETECTION C:\Documents and Settings\Susan Edson\Local Settings\Temp\0.2842671284968712.exe Exploit.Drop.4 DENY

16:13:45 Susan Edson DETECTION C:\Documents and Settings\Susan Edson\Local Settings\Temp\0.2842671284968712.exe Exploit.Drop.4 DENY

Protection Log 12/12: This is only partial as the file is too long to post on this forum.

09:53:18 Susan Edson DETECTION C:\Documents and Settings\Susan Edson\Local Settings\Application Data\olv.exe Trojan.ExeShell.Gen QUARANTINE

09:53:40 Susan Edson DETECTION C:\Documents and Settings\Susan Edson\Local Settings\Application Data\djt.exe Trojan.ExeShell.Gen QUARANTINE

09:53:40 Susan Edson DETECTION C:\DOCUMENTS AND SETTINGS\SUSAN EDSON\LOCAL SETTINGS\APPLICATION DATA\OLV.EXE Trojan.ExeShell.Gen DENY

09:53:41 Susan Edson DETECTION C:\DOCUMENTS AND SETTINGS\SUSAN EDSON\LOCAL SETTINGS\APPLICATION DATA\DJT.EXE Trojan.ExeShell.Gen DENY

09:59:22 Susan Edson IP-BLOCK 62.122.75.230 (Type: outgoing)

09:59:25 Susan Edson IP-BLOCK 62.122.75.230 (Type: outgoing)

09:59:31 Susan Edson IP-BLOCK 62.122.75.230 (Type: outgoing)

10:07:16 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:07:19 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:07:20 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:07:23 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:07:25 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:07:29 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:09:08 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:09:11 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:09:17 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:09:19 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:09:33 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:09:36 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:09:42 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:10:44 Susan Edson IP-BLOCK 62.122.75.230 (Type: outgoing)

10:10:46 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:10:47 Susan Edson IP-BLOCK 62.122.75.230 (Type: outgoing)

10:10:49 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:10:53 Susan Edson IP-BLOCK 62.122.75.230 (Type: outgoing)

10:10:55 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:11:01 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:11:04 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:11:10 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:11:23 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:11:26 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:11:32 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:12:01 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:12:04 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:12:10 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:12:32 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:12:35 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:12:41 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:13:06 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:13:09 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:13:15 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:13:36 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:13:39 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:13:45 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:14:07 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:14:09 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:14:15 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:14:38 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:14:41 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:14:47 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:15:07 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:15:10 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:15:16 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:15:36 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:23:02 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

10:23:05 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

10:23:11 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

10:23:23 Susan Edson IP-BLOCK 146.185.250.211 (Type: outgoing)

10:23:26 Susan Edson IP-BLOCK 146.185.250.211 (Type: outgoing)

10:23:32 Susan Edson IP-BLOCK 146.185.250.211 (Type: outgoing)

10:28:56 Susan Edson IP-BLOCK 91.212.226.123 (Type: outgoing)

10:28:59 Susan Edson IP-BLOCK 91.212.226.123 (Type: outgoing)

10:29:04 Susan Edson IP-BLOCK 91.212.226.123 (Type: outgoing)

10:29:32 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:29:35 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:29:41 Susan Edson IP-BLOCK 206.161.121.100 (Type: outgoing)

10:29:51 Susan Edson IP-BLOCK 199.80.55.123 (Type: outgoing)

10:29:54 Susan Edson IP-BLOCK 199.80.55.123 (Type: outgoing)

10:30:00 Susan Edson IP-BLOCK 199.80.55.123 (Type: outgoing)

10:30:45 Susan Edson IP-BLOCK 62.122.75.230 (Type: outgoing)

10:30:48 Susan Edson IP-BLOCK 62.122.75.230 (Type: outgoing)

10:30:54 Susan Edson IP-BLOCK 62.122.75.230 (Type: outgoing)

10:32:07 Susan Edson IP-BLOCK 199.80.55.123 (Type: outgoing)

10:32:09 Susan Edson IP-BLOCK 199.80.55.123 (Type: outgoing)

10:32:15 Susan Edson IP-BLOCK 199.80.55.123 (Type: outgoing)

10:46:48 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:46:51 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:46:55 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:46:57 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:46:58 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:04 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:09 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:12 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:18 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:19 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:22 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:28 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:30 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:33 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:39 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:40 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:43 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:49 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:51 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:47:54 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:00 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:01 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:04 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:10 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:12 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:15 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:22 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:22 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:25 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:31 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:33 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:37 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:43 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:43 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:46 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:52 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:55 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:48:58 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:04 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:04 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:07 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:13 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:16 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:19 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:25 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:25 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:28 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:34 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:37 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:40 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:46 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:46 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:49 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:55 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:49:58 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:01 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:07 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:07 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:10 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:16 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:19 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:22 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:28 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:28 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:31 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:37 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:40 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:43 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:49 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:49 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:52 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:50:58 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:51:01 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:51:04 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:51:10 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:51:10 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:51:14 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

10:51:20 Susan Edson IP-BLOCK 83.133.124.250 (Type: outgoing)

11:04:04 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:07 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:13 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:13 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:16 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:22 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:25 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:28 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:34 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:34 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:37 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:43 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:46 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:49 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:55 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:55 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:04:58 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:04 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:08 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:10 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:16 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:17 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:19 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:25 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:29 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:32 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:37 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:38 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:40 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:46 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:50 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:53 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:58 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:05:59 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:01 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:07 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:11 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:14 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:19 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:20 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:22 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:28 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:32 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:35 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:40 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:41 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:43 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:49 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:53 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:06:56 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:01 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:02 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:04 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:10 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:14 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:17 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:22 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:23 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:25 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:31 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:35 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:38 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:43 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:44 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:46 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:52 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:56 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:07:59 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:08:04 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:08:05 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:08:07 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:08:13 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:08:17 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:08:20 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:08:25 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:08:26 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:08:28 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:08:34 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

11:17:59 (null) MESSAGE Protection started successfully

11:18:17 Susan Edson MESSAGE IP Protection started successfully

11:38:27 Susan Edson MESSAGE Scheduled update executed successfully

11:38:27 Susan Edson MESSAGE IP Protection stopped

11:38:34 Susan Edson MESSAGE Database updated successfully

11:38:40 Susan Edson MESSAGE IP Protection started successfully

12:03:04 Susan Edson IP-BLOCK 146.185.250.214 (Type: outgoing)

12:03:07 Susan Edson IP-BLOCK 146.185.250.214 (Type: outgoing)

12:03:13 Susan Edson IP-BLOCK 146.185.250.214 (Type: outgoing)

12:03:42 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:03:45 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:03:48 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:03:51 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:03:51 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:03:57 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:03 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:06 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:09 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:12 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:12 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:18 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:24 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:27 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:31 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:33 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:34 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:40 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:45 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:48 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:53 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:54 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:04:56 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:02 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:06 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:09 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:15 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:19 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:21 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:05:24 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:05:25 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:29 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:30 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:05:32 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:37 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:38 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:40 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:42 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:05:45 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:05:46 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:50 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:51 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:05:53 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:58 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:05:59 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:01 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:03 Susan Edson IP-BLOCK 83.133.121.156 (Type: outgoing)

12:06:06 Susan Edson IP-BLOCK 83.133.121.156 (Type: outgoing)

12:06:07 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:11 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:12 Susan Edson IP-BLOCK 83.133.121.156 (Type: outgoing)

12:06:14 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:19 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:20 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:22 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:24 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:06:27 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:06:28 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:32 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:33 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:06:35 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:40 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:41 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:43 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:45 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:06:48 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:06:49 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:53 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:06:54 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:06:57 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:01 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:03 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:04 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:06 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:07:09 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:07:10 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:15 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:15 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:07:18 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:22 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:24 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:25 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:27 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:07:30 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:07:31 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:36 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:36 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:07:39 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:43 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:45 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:46 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:48 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:07:51 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:07:52 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:57 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:07:57 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:08:00 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:08:04 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:08:06 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:08:07 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:08:09 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:08:12 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:08:13 Susan Edson IP-BLOCK 146.185.250.210 (Type: outgoing)

12:08:18 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:08:30 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:08:33 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:08:39 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:18:05 Susan Edson IP-BLOCK 146.185.250.214 (Type: outgoing)

12:18:08 Susan Edson IP-BLOCK 146.185.250.214 (Type: outgoing)

12:18:14 Susan Edson IP-BLOCK 146.185.250.214 (Type: outgoing)

12:18:57 Susan Edson IP-BLOCK 146.185.250.211 (Type: outgoing)

12:19:00 Susan Edson IP-BLOCK 146.185.250.211 (Type: outgoing)

12:19:06 Susan Edson IP-BLOCK 146.185.250.211 (Type: outgoing)

12:19:18 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

12:19:21 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

12:19:27 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

12:20:30 Susan Edson IP-BLOCK 146.185.250.213 (Type: outgoing)

12:20:33 Susan Edson IP-BLOCK 146.185.250.213 (Type: outgoing)

12:20:39 Susan Edson IP-BLOCK 146.185.250.213 (Type: outgoing)

12:21:26 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

12:21:29 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

12:21:35 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

12:39:25 Susan Edson MESSAGE Protection started successfully

12:39:34 Susan Edson MESSAGE IP Protection started successfully

12:41:22 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:41:25 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:41:31 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:41:43 Susan Edson IP-BLOCK 83.133.121.156 (Type: outgoing)

12:41:46 Susan Edson IP-BLOCK 83.133.121.156 (Type: outgoing)

12:41:52 Susan Edson IP-BLOCK 83.133.121.156 (Type: outgoing)

12:42:04 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:42:07 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:42:13 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:42:25 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:42:28 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:42:34 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:42:46 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:42:49 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:42:55 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:43:08 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:43:11 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:43:17 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:43:29 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:43:32 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:43:37 Susan Edson IP-BLOCK 146.185.250.214 (Type: outgoing)

12:43:38 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:43:40 Susan Edson IP-BLOCK 146.185.250.214 (Type: outgoing)

12:43:46 Susan Edson IP-BLOCK 146.185.250.214 (Type: outgoing)

12:43:50 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:43:53 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:43:59 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:44:11 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:44:14 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:44:20 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:44:29 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

12:44:32 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

12:44:33 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:44:36 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:44:38 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

12:44:42 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:44:54 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:44:57 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:45:03 Susan Edson IP-BLOCK 83.133.125.41 (Type: outgoing)

12:45:15 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:45:18 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:45:24 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:45:36 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:45:39 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:45:42 Susan Edson IP-BLOCK 146.185.250.213 (Type: outgoing)

12:45:45 Susan Edson IP-BLOCK 146.185.250.213 (Type: outgoing)

12:45:45 Susan Edson IP-BLOCK 83.133.121.147 (Type: outgoing)

12:45:51 Susan Edson IP-BLOCK 146.185.250.213 (Type: outgoing)

12:45:57 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:46:00 Susan Edson IP-BLOCK 83.133.124.245 (Type: outgoing)

12:46:03 Susan Edson IP-BLOCK 146.185.250.212 (Type: outgoing)

12:46:06 Susan Edson IP-BLOCK 146.185.250.212 (Type: outgoing)

12:46:12 Susan Edson IP-BLOCK 146.185.250.212 (Type: outgoing)

12:48:13 Susan Edson IP-BLOCK 146.185.250.214 (Type: outgoing)

12:48:16 Susan Edson IP-BLOCK 146.185.250.214 (Type: outgoing)

12:48:22 Susan Edson IP-BLOCK 146.185.250.214 (Type: outgoing)

12:49:05 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

12:49:08 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

12:49:14 Susan Edson IP-BLOCK 63.223.106.17 (Type: outgoing)

12:50:17 Susan Edson IP-BLOCK 146.185.250.213 (Type: outgoing)

12:50:20 Susan Edson IP-BLOCK 146.185.250.213 (Type: outgoing)

attach1213.zip

Link to post
Share on other sites

  • 2 weeks later...
  • Staff

Hi and welcome to Malwarebytes.

Please update MBAM, run a Quick Scan, and post its log.

Next, please visit this webpage for instructions for running ComboFix:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

  • When the tool is finished, it will produce a report for you.
  • Please post the contents of C:\ComboFix.txt along with a new DDS log so we may continue cleaning the system.

Link to post
Share on other sites

  • 1 month later...

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.