Detected covert channnel exploit in ICMP packet Remote IP address: 87.248.122.122

[problemAV]

Hello

Im new here and i have a problem . Every time i connect to the internet i get a message from ESET Smart Security 6. ( i had 5 before, upgraded to 6 but didnt solved the problem)

"Detected covert channnel exploit in ICMP packet Remote IP address: 87.248.122.122

I mailed ESET and they say there is nothing i can do because is a flood tipy attack from internet.... But how they find me exactly to flood me? Im using a thethering solution, network sharing from my mobile ....

ESET said there's nothing i can do only to block it....

Is this true? I unned combo-fix and here is the log...

I appreciate if some one can look and advise me what to do .

ComboFix.txt

[screen317]

Hi and welcome to Malwarebytes.

Can you block that IP address with your firewall? If you do that, you shouldn't get the alerts anymore. Let me know how it goes.

[problemAV]

Thank you for you help.

I try to block the IP and another one shoed up. Anyway , I've blocked them both in COMODO Firewall then restarted PC.

When I started the internet ....same thing. You can see in the attached jpeg that blocking in firewall had no effect.

Hmmm might be something local on my PC that is "trying to call home"? Like a keylogger or something?

I did scan my PC with Malwarebytes 1/61/0/1400 and Eset ... No malware sign.

What can it be? But more important....how can i get this threat removed?

Thank you for your help. You are doing a great job here on this forum.

[problemAV]

so now....i have from two IPs this problem with ICMP packet

Detected covert channnel exploit in ICMP packet Remote IP address

87.248.112.181 and

87.248.122.122

[screen317]

Hi,

It's not a keylogger..

Can you block this entire range of IPs?

87.248.xxx.xxx

[problemAV]

i did.... problem still NOT solved

[screen317]

Hi,

Sorry for the delay.

So you're still getting the same message, just with a new IP? Can you post a screenshot with a new error message please?

If you're still getting the error, click on that "CHAT NOW" button to talk to the Comodo people and ask them (I know you did already, but I'd like you to again so I can see a transcript of the chat) about this.

[screen317]

Are you still with us? This topic will be closed in a few days if we do not hear back from you.

[screen317]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!