Infected - nothing finds the problem...

winboned · December 5, 2013

I've got this system which has an issue... which nothing finds the source or removes the problem.

Something starts up explorer.exe processes and thes are trying to connect to various sites, and the processes get so bad that they will have 100's of threads and take nearly 100% of CPU.

I can play whack a process with them to suspend then terminate them to get the system back to use to try to find things... nothing has found it... other issues were found but the root core issue persists.

Can NOT run DDS.. just produces attach.txt, the dds.txt never generates.. AVG antivirus was disabled. No change..

Malware Bytes Anti Malware is blocking some connections to malicious sites per the pop up but the core problem persists.

I've used AVG, Avast, Norton any many more.. No chage... nothing found....

Farbar Recover produces:

dds WILL produce attach.txt ONLY

.UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.IF REQUESTED, ZIP IT UP & ATTACH IT.DDS (Ver_2012-11-20.01).Microsoft Windows 7 Home PremiumBoot Device: \Device\HarddiskVolume1Install Date: 10/18/2010 5:00:34 PMSystem Uptime: 12/4/2013 6:45:34 PM (1 hours ago).Motherboard: FOXCONN |  | 2AB1Processor: AMD Athlon(tm) II X2 255 Processor | CPU 1 | 3100/200mhz.==== Disk Partitions =========================.C: is FIXED (NTFS) - 584 GiB total, 507.486 GiB free.D: is FIXED (NTFS) - 12 GiB total, 1.462 GiB free.E: is CDROM ()F: is RemovableG: is RemovableH: is RemovableI: is RemovableJ: is FIXED (NTFS) - 931 GiB total, 929.806 GiB free..==== Disabled Device Manager Items =============.Class GUID: {4d36e971-e325-11ce-bfc1-08002be10318}Description: Photosmart C7200 seriesDevice ID: ROOT\MULTIFUNCTION\0001Manufacturer: HPName: Photosmart C7200 seriesPNP Device ID: ROOT\MULTIFUNCTION\0001Service:.Class GUID: {4d36e971-e325-11ce-bfc1-08002be10318}Description: Officejet Pro 8600Device ID: ROOT\MULTIFUNCTION\0002Manufacturer: HPName: Officejet Pro 8600PNP Device ID: ROOT\MULTIFUNCTION\0002Service:.==== System Restore Points ===================.RP195: 11/30/2013 2:13:18 PM - Scheduled CheckpointRP196: 12/2/2013 4:19:18 PM - Windows UpdateRP197: 12/2/2013 6:16:49 PM - Windows UpdateRP198: 12/2/2013 7:57:38 PM - Windows UpdateRP199: 12/4/2013 6:31:05 PM - Malwarebytes Anti-Rootkit Restore Point.==== Image File Execution Options =============..==== Installed Programs ======================..==== End Of File ===========================

Malware bytes log showing connections:

2013/12/04 03:52:55 -0500 LINDA-HP Linda MESSAGE Executing scheduled update:  Daily2013/12/04 03:53:02 -0500 LINDA-HP Linda MESSAGE Scheduled update executed successfully:  database updated from version v2013.12.04.01 to version v2013.12.04.042013/12/04 03:53:02 -0500 LINDA-HP Linda MESSAGE Starting database refresh2013/12/04 03:53:02 -0500 LINDA-HP Linda MESSAGE Stopping IP protection2013/12/04 03:53:02 -0500 LINDA-HP Linda MESSAGE IP Protection stopped successfully2013/12/04 03:53:06 -0500 LINDA-HP Linda MESSAGE Database refreshed successfully2013/12/04 03:53:06 -0500 LINDA-HP Linda MESSAGE Starting IP protection2013/12/04 03:53:12 -0500 LINDA-HP Linda MESSAGE IP Protection started successfully2013/12/04 10:27:42 -0500 LINDA-HP (null) MESSAGE Starting protection2013/12/04 10:27:42 -0500 LINDA-HP (null) MESSAGE Protection started successfully2013/12/04 10:27:42 -0500 LINDA-HP (null) MESSAGE Starting IP protection2013/12/04 10:27:48 -0500 LINDA-HP Linda MESSAGE IP Protection started successfully2013/12/04 10:30:50 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49369, Process: explorer.exe)2013/12/04 10:30:50 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49372, Process: explorer.exe)2013/12/04 10:31:06 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49443, Process: explorer.exe)2013/12/04 10:31:47 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49541, Process: explorer.exe)2013/12/04 10:34:28 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49884, Process: explorer.exe)2013/12/04 10:34:28 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49887, Process: explorer.exe)2013/12/04 10:34:36 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49890, Process: explorer.exe)2013/12/04 10:35:08 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50119, Process: explorer.exe)2013/12/04 10:36:21 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50311, Process: explorer.exe)2013/12/04 10:36:29 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50354, Process: explorer.exe)2013/12/04 10:37:58 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50451, Process: explorer.exe)2013/12/04 10:56:22 -0500 LINDA-HP (null) MESSAGE Starting protection2013/12/04 10:56:22 -0500 LINDA-HP (null) MESSAGE Protection started successfully2013/12/04 10:56:22 -0500 LINDA-HP (null) MESSAGE Starting IP protection2013/12/04 10:56:28 -0500 LINDA-HP (null) MESSAGE IP Protection started successfully2013/12/04 11:22:44 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49320, Process: explorer.exe)2013/12/04 11:22:53 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49349, Process: explorer.exe)2013/12/04 11:23:41 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49625, Process: explorer.exe)2013/12/04 11:24:45 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49730, Process: explorer.exe)2013/12/04 11:24:53 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49732, Process: explorer.exe)2013/12/04 11:24:53 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49737, Process: explorer.exe)2013/12/04 11:31:53 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50487, Process: explorer.exe)2013/12/04 11:31:53 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50488, Process: explorer.exe)2013/12/04 11:31:53 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50489, Process: explorer.exe)2013/12/04 11:32:01 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 50509, Process: explorer.exe)2013/12/04 11:32:02 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50550, Process: explorer.exe)2013/12/04 11:37:17 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51700, Process: explorer.exe)2013/12/04 11:41:28 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51930, Process: explorer.exe)2013/12/04 11:41:28 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51937, Process: explorer.exe)2013/12/04 11:43:46 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52271, Process: explorer.exe)2013/12/04 11:47:09 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61319, Process: explorer.exe)2013/12/04 11:52:42 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61538, Process: explorer.exe)2013/12/04 11:52:53 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61543, Process: explorer.exe)2013/12/04 11:56:42 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61875, Process: explorer.exe)2013/12/04 11:56:50 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61881, Process: explorer.exe)2013/12/04 11:59:18 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62059, Process: explorer.exe)2013/12/04 12:01:46 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62134, Process: explorer.exe)2013/12/04 12:02:07 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62140, Process: explorer.exe)2013/12/04 12:03:12 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62173, Process: explorer.exe)2013/12/04 12:04:34 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62358, Process: explorer.exe)2013/12/04 12:06:41 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62605, Process: explorer.exe)2013/12/04 12:11:02 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62891, Process: explorer.exe)2013/12/04 12:12:49 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62979, Process: explorer.exe)2013/12/04 12:14:38 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 63263, Process: explorer.exe)2013/12/04 12:15:43 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63381, Process: explorer.exe)2013/12/04 12:21:15 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 63792, Process: explorer.exe)2013/12/04 12:24:38 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 63820, Process: explorer.exe)2013/12/04 12:25:14 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 63827, Process: explorer.exe)2013/12/04 12:26:27 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63856, Process: explorer.exe)2013/12/04 12:28:04 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64052, Process: explorer.exe)2013/12/04 12:33:45 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 64447, Process: explorer.exe)2013/12/04 12:35:08 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64573, Process: explorer.exe)2013/12/04 12:38:07 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 64865, Process: explorer.exe)2013/12/04 12:38:07 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64869, Process: explorer.exe)2013/12/04 12:38:07 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64870, Process: explorer.exe)2013/12/04 12:38:07 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64868, Process: explorer.exe)2013/12/04 12:39:59 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65015, Process: explorer.exe)2013/12/04 12:40:00 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65016, Process: explorer.exe)2013/12/04 12:41:54 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65026, Process: explorer.exe)2013/12/04 12:43:04 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65039, Process: explorer.exe)2013/12/04 12:43:45 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65141, Process: explorer.exe)2013/12/04 12:44:42 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65151, Process: explorer.exe)2013/12/04 12:45:49 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65160, Process: explorer.exe)2013/12/04 12:48:56 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65294, Process: explorer.exe)2013/12/04 12:49:37 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65300, Process: explorer.exe)2013/12/04 12:50:03 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65305, Process: explorer.exe)2013/12/04 12:50:11 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65308, Process: explorer.exe)2013/12/04 12:53:27 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65522, Process: explorer.exe)2013/12/04 12:57:30 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49474, Process: explorer.exe)2013/12/04 12:57:39 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49485, Process: explorer.exe)2013/12/04 12:58:12 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49660, Process: explorer.exe)2013/12/04 13:00:08 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49906, Process: explorer.exe)2013/12/04 13:02:26 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50360, Process: explorer.exe)2013/12/04 13:06:18 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50820, Process: explorer.exe)2013/12/04 13:07:39 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50853, Process: explorer.exe)2013/12/04 13:07:41 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50854, Process: explorer.exe)2013/12/04 13:07:41 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50856, Process: explorer.exe)2013/12/04 13:10:23 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51006, Process: explorer.exe)2013/12/04 13:12:30 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51014, Process: explorer.exe)2013/12/04 13:13:59 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51023, Process: explorer.exe)2013/12/04 13:16:49 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51185, Process: explorer.exe)2013/12/04 13:17:53 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51353, Process: explorer.exe)2013/12/04 13:19:31 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51365, Process: explorer.exe)2013/12/04 13:19:31 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51368, Process: explorer.exe)2013/12/04 13:20:28 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51420, Process: explorer.exe)2013/12/04 13:22:39 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51451, Process: explorer.exe)2013/12/04 13:24:25 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51560, Process: explorer.exe)2013/12/04 13:25:39 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51660, Process: explorer.exe)2013/12/04 13:26:51 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51670, Process: explorer.exe)2013/12/04 13:27:56 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51679, Process: explorer.exe)2013/12/04 13:29:40 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52016, Process: explorer.exe)2013/12/04 13:29:41 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52033, Process: explorer.exe)2013/12/04 13:30:29 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52339, Process: explorer.exe)2013/12/04 13:31:34 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52430, Process: explorer.exe)2013/12/04 13:33:12 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52446, Process: explorer.exe)2013/12/04 13:34:26 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52461, Process: explorer.exe)2013/12/04 13:36:12 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52593, Process: explorer.exe)2013/12/04 13:37:17 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52652, Process: explorer.exe)2013/12/04 13:43:49 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52800, Process: explorer.exe)2013/12/04 13:46:31 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52819, Process: explorer.exe)2013/12/04 13:46:31 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52821, Process: explorer.exe)2013/12/04 13:48:23 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52844, Process: explorer.exe)2013/12/04 13:48:23 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52855, Process: explorer.exe)2013/12/04 13:49:20 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 53252, Process: explorer.exe)2013/12/04 13:51:37 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 53665, Process: explorer.exe)2013/12/04 13:51:45 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 53706, Process: explorer.exe)2013/12/04 13:53:38 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 54159, Process: explorer.exe)2013/12/04 13:53:46 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 54189, Process: explorer.exe)2013/12/04 13:53:46 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 54203, Process: explorer.exe)2013/12/04 13:57:32 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 55192, Process: explorer.exe)2013/12/04 13:57:32 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55211, Process: explorer.exe)2013/12/04 13:59:41 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55451, Process: explorer.exe)2013/12/04 14:00:35 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 55588, Process: explorer.exe)2013/12/04 14:02:45 -0500 LINDA-HP Linda IP-BLOCK 5.149.255.46 (Type: outgoing, Port: 55785, Process: explorer.exe)2013/12/04 14:03:34 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 55789, Process: explorer.exe)2013/12/04 14:05:53 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55812, Process: explorer.exe)2013/12/04 14:08:08 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 56033, Process: explorer.exe)2013/12/04 14:10:49 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 56545, Process: explorer.exe)2013/12/04 14:12:10 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 57006, Process: explorer.exe)2013/12/04 14:12:51 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 57150, Process: explorer.exe)2013/12/04 14:14:44 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 57712, Process: explorer.exe)2013/12/04 14:16:38 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 58316, Process: explorer.exe)2013/12/04 14:19:12 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 58635, Process: explorer.exe)2013/12/04 14:22:10 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 58663, Process: explorer.exe)2013/12/04 14:25:00 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 58807, Process: explorer.exe)2013/12/04 14:25:25 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 58827, Process: explorer.exe)2013/12/04 14:30:30 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 58878, Process: explorer.exe)2013/12/04 14:30:30 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 58880, Process: explorer.exe)2013/12/04 14:32:23 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 58888, Process: explorer.exe)2013/12/04 14:33:19 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 58907, Process: explorer.exe)2013/12/04 14:33:19 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 58908, Process: explorer.exe)2013/12/04 14:35:28 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 59153, Process: explorer.exe)2013/12/04 14:35:28 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59156, Process: explorer.exe)2013/12/04 14:36:08 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 59397, Process: explorer.exe)2013/12/04 14:36:49 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59515, Process: explorer.exe)2013/12/04 14:38:09 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59636, Process: explorer.exe)2013/12/04 14:39:05 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 59894, Process: explorer.exe)2013/12/04 14:40:18 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59963, Process: explorer.exe)2013/12/04 14:41:38 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 60098, Process: explorer.exe)2013/12/04 14:42:11 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 60127, Process: explorer.exe)2013/12/04 14:42:11 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 60128, Process: explorer.exe)2013/12/04 14:42:11 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 60129, Process: explorer.exe)2013/12/04 14:44:19 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 60408, Process: explorer.exe)2013/12/04 14:47:33 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 60914, Process: explorer.exe)2013/12/04 14:47:41 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 60919, Process: explorer.exe)2013/12/04 14:50:39 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 61736, Process: explorer.exe)2013/12/04 14:54:25 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62212, Process: explorer.exe)2013/12/04 14:54:26 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62214, Process: explorer.exe)2013/12/04 14:57:40 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62238, Process: explorer.exe)2013/12/04 14:57:49 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62241, Process: explorer.exe)2013/12/04 14:58:05 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62246, Process: explorer.exe)2013/12/04 14:59:18 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62256, Process: explorer.exe)2013/12/04 14:59:18 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62258, Process: explorer.exe)2013/12/04 15:02:55 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62557, Process: explorer.exe)2013/12/04 15:03:43 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62625, Process: explorer.exe)2013/12/04 15:05:12 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62848, Process: explorer.exe)2013/12/04 15:05:44 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62951, Process: explorer.exe)2013/12/04 15:07:53 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 63452, Process: explorer.exe)2013/12/04 15:07:53 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63456, Process: explorer.exe)2013/12/04 15:09:54 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63910, Process: explorer.exe)2013/12/04 15:09:54 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 63911, Process: explorer.exe)2013/12/04 15:12:11 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 64386, Process: explorer.exe)2013/12/04 15:13:08 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 64515, Process: explorer.exe)2013/12/04 15:14:36 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64918, Process: explorer.exe)2013/12/04 15:16:53 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65131, Process: explorer.exe)2013/12/04 15:17:58 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65137, Process: explorer.exe)2013/12/04 15:18:54 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65145, Process: explorer.exe)2013/12/04 15:19:59 -0500 LINDA-HP Linda IP-BLOCK 50.62.128.121 (Type: outgoing, Port: 65159, Process: explorer.exe)2013/12/04 15:21:12 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65215, Process: explorer.exe)2013/12/04 15:23:37 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65306, Process: explorer.exe)2013/12/04 15:23:45 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65309, Process: explorer.exe)2013/12/04 15:23:45 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65314, Process: explorer.exe)2013/12/04 15:26:03 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49531, Process: explorer.exe)2013/12/04 15:26:03 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49532, Process: explorer.exe)2013/12/04 15:26:03 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49536, Process: explorer.exe)2013/12/04 15:27:07 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49548, Process: explorer.exe)2013/12/04 15:28:04 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49560, Process: explorer.exe)2013/12/04 15:28:04 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49561, Process: explorer.exe)2013/12/04 15:28:04 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49563, Process: explorer.exe)2013/12/04 15:29:41 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49944, Process: explorer.exe)2013/12/04 15:29:49 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49959, Process: explorer.exe)2013/12/04 15:30:46 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50334, Process: explorer.exe)2013/12/04 15:31:42 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50502, Process: explorer.exe)2013/12/04 15:33:18 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50656, Process: explorer.exe)2013/12/04 15:34:15 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50672, Process: explorer.exe)2013/12/04 15:34:15 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50678, Process: explorer.exe)2013/12/04 15:34:15 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50683, Process: explorer.exe)2013/12/04 15:36:48 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50723, Process: explorer.exe)2013/12/04 15:36:48 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50736, Process: explorer.exe)2013/12/04 15:37:45 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50902, Process: explorer.exe)2013/12/04 15:38:25 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50928, Process: explorer.exe)2013/12/04 15:42:35 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51484, Process: explorer.exe)2013/12/04 15:42:43 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51570, Process: explorer.exe)2013/12/04 15:59:40 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52104, Process: explorer.exe)2013/12/04 15:59:40 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52109, Process: explorer.exe)2013/12/04 15:59:40 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52111, Process: explorer.exe)2013/12/04 15:59:40 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52121, Process: explorer.exe)2013/12/04 16:08:56 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 53382, Process: explorer.exe)2013/12/04 16:08:56 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 53385, Process: explorer.exe)2013/12/04 16:08:56 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 53391, Process: explorer.exe)2013/12/04 16:08:56 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 53474, Process: explorer.exe)2013/12/04 16:12:10 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 54028, Process: explorer.exe)2013/12/04 16:12:18 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 54044, Process: explorer.exe)2013/12/04 16:15:31 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 54500, Process: explorer.exe)2013/12/04 16:16:36 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 54725, Process: explorer.exe)2013/12/04 16:18:37 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 55203, Process: explorer.exe)2013/12/04 16:18:37 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55223, Process: explorer.exe)2013/12/04 16:18:37 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55225, Process: explorer.exe)2013/12/04 16:20:13 -0500 LINDA-HP Linda IP-BLOCK 76.84.249.229 (Type: outgoing, Port: 55467, Process: explorer.exe)2013/12/04 16:20:54 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 55557, Process: explorer.exe)2013/12/04 16:20:54 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 55558, Process: explorer.exe)2013/12/04 16:20:54 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55564, Process: explorer.exe)2013/12/04 16:21:02 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55566, Process: explorer.exe)2013/12/04 16:23:11 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 55814, Process: explorer.exe)2013/12/04 16:23:19 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55817, Process: explorer.exe)2013/12/04 16:24:07 -0500 LINDA-HP Linda IP-BLOCK 173.67.7.106 (Type: outgoing, Port: 55930, Process: explorer.exe)2013/12/04 16:25:03 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55980, Process: explorer.exe)2013/12/04 16:25:03 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55982, Process: explorer.exe)2013/12/04 16:26:16 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 55993, Process: explorer.exe)2013/12/04 16:27:52 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 56010, Process: explorer.exe)2013/12/04 16:27:52 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 56085, Process: explorer.exe)2013/12/04 16:29:45 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 56391, Process: explorer.exe)2013/12/04 16:31:05 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 56710, Process: explorer.exe)2013/12/04 16:32:10 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 56838, Process: explorer.exe)2013/12/04 16:32:58 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 56916, Process: explorer.exe)2013/12/04 16:32:58 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 56919, Process: explorer.exe)2013/12/04 16:34:35 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 57238, Process: explorer.exe)2013/12/04 16:34:35 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 57240, Process: explorer.exe)2013/12/04 16:34:43 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 57246, Process: explorer.exe)2013/12/04 16:37:16 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 57455, Process: explorer.exe)2013/12/04 16:37:16 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 57459, Process: explorer.exe)2013/12/04 16:37:57 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 57647, Process: explorer.exe)2013/12/04 16:38:53 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 57786, Process: explorer.exe)2013/12/04 16:38:53 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 57789, Process: explorer.exe)2013/12/04 16:38:53 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 57800, Process: explorer.exe)2013/12/04 16:40:38 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 57972, Process: explorer.exe)2013/12/04 16:41:34 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 58027, Process: explorer.exe)2013/12/04 16:41:34 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 58031, Process: explorer.exe)2013/12/04 16:42:38 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 58259, Process: explorer.exe)2013/12/04 16:43:51 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 58487, Process: explorer.exe)2013/12/04 16:44:56 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 58581, Process: explorer.exe)2013/12/04 16:46:16 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 58837, Process: explorer.exe)2013/12/04 16:47:13 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 58887, Process: explorer.exe)2013/12/04 16:48:25 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59011, Process: explorer.exe)2013/12/04 16:48:33 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59012, Process: explorer.exe)2013/12/04 16:49:13 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 59019, Process: explorer.exe)2013/12/04 16:50:10 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 59037, Process: explorer.exe)2013/12/04 16:50:18 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59061, Process: explorer.exe)2013/12/04 16:50:18 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59069, Process: explorer.exe)2013/12/04 16:51:22 -0500 LINDA-HP Linda IP-BLOCK 78.138.105.151 (Type: outgoing, Port: 59093, Process: explorer.exe)2013/12/04 16:51:46 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 59097, Process: explorer.exe)2013/12/04 16:53:55 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 59318, Process: explorer.exe)2013/12/04 16:53:55 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59321, Process: explorer.exe)2013/12/04 16:54:44 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 59359, Process: explorer.exe)2013/12/04 16:55:32 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 59420, Process: explorer.exe)2013/12/04 16:55:40 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59422, Process: explorer.exe)2013/12/04 16:58:05 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59578, Process: explorer.exe)2013/12/04 16:59:58 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 59797, Process: explorer.exe)2013/12/04 16:59:58 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 59801, Process: explorer.exe)2013/12/04 16:59:58 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59806, Process: explorer.exe)2013/12/04 17:01:02 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 60082, Process: explorer.exe)2013/12/04 17:02:15 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 60198, Process: explorer.exe)2013/12/04 17:03:19 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 60285, Process: explorer.exe)2013/12/04 17:04:40 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 60469, Process: explorer.exe)2013/12/04 17:06:24 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 60877, Process: explorer.exe)2013/12/04 17:06:24 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 60909, Process: explorer.exe)2013/12/04 17:06:25 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 60918, Process: explorer.exe)2013/12/04 17:09:14 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61968, Process: explorer.exe)2013/12/04 17:10:10 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62106, Process: explorer.exe)2013/12/04 17:10:10 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62115, Process: explorer.exe)2013/12/04 17:11:23 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62308, Process: explorer.exe)2013/12/04 17:12:28 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62492, Process: explorer.exe)2013/12/04 17:12:28 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62497, Process: explorer.exe)2013/12/04 17:12:36 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62501, Process: explorer.exe)2013/12/04 17:14:12 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62645, Process: explorer.exe)2013/12/04 17:14:53 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62659, Process: explorer.exe)2013/12/04 17:16:05 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62813, Process: explorer.exe)2013/12/04 17:16:05 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62821, Process: explorer.exe)2013/12/04 17:18:38 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63134, Process: explorer.exe)2013/12/04 17:20:07 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 63386, Process: explorer.exe)2013/12/04 17:20:39 -0500 LINDA-HP Linda IP-BLOCK 78.138.105.151 (Type: outgoing, Port: 63457, Process: explorer.exe)2013/12/04 17:21:44 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 63652, Process: explorer.exe)2013/12/04 17:21:52 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 63654, Process: explorer.exe)2013/12/04 17:21:52 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63659, Process: explorer.exe)2013/12/04 17:21:52 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63661, Process: explorer.exe)2013/12/04 17:24:25 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 64335, Process: explorer.exe)2013/12/04 17:25:22 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64595, Process: explorer.exe)2013/12/04 17:26:51 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 64823, Process: explorer.exe)2013/12/04 17:26:52 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64830, Process: explorer.exe)2013/12/04 17:30:06 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65023, Process: explorer.exe)2013/12/04 17:31:11 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65042, Process: explorer.exe)2013/12/04 17:31:53 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65079, Process: explorer.exe)2013/12/04 17:33:22 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65273, Process: explorer.exe)2013/12/04 17:37:12 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65472, Process: explorer.exe)2013/12/04 17:38:25 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65532, Process: explorer.exe)2013/12/04 17:38:34 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49192, Process: explorer.exe)2013/12/04 17:40:35 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49365, Process: explorer.exe)2013/12/04 17:40:36 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49367, Process: explorer.exe)2013/12/04 17:40:36 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49368, Process: explorer.exe)2013/12/04 17:41:49 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49576, Process: explorer.exe)2013/12/04 17:43:09 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49667, Process: explorer.exe)2013/12/04 17:44:07 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49753, Process: explorer.exe)2013/12/04 17:45:45 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49942, Process: explorer.exe)2013/12/04 17:45:45 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49944, Process: explorer.exe)2013/12/04 17:45:54 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49951, Process: explorer.exe)2013/12/04 17:50:08 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50166, Process: explorer.exe)2013/12/04 17:50:52 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50179, Process: explorer.exe)2013/12/04 17:51:01 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50182, Process: explorer.exe)2013/12/04 17:51:01 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50185, Process: explorer.exe)2013/12/04 17:51:57 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50218, Process: explorer.exe)2013/12/04 17:53:26 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50369, Process: explorer.exe)2013/12/04 17:54:53 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50383, Process: explorer.exe)2013/12/04 17:56:14 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50395, Process: explorer.exe)2013/12/04 17:57:42 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50418, Process: explorer.exe)2013/12/04 17:59:03 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50427, Process: explorer.exe)2013/12/04 17:59:03 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50431, Process: explorer.exe)2013/12/04 17:59:03 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50432, Process: explorer.exe)2013/12/04 18:00:48 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 50712, Process: explorer.exe)2013/12/04 18:03:05 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50752, Process: explorer.exe)2013/12/04 18:03:05 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50753, Process: explorer.exe)2013/12/04 18:03:06 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50754, Process: explorer.exe)2013/12/04 18:04:12 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50766, Process: explorer.exe)2013/12/04 18:04:57 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50861, Process: explorer.exe)2013/12/04 18:06:02 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50989, Process: explorer.exe)2013/12/04 18:07:39 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51006, Process: explorer.exe)2013/12/04 18:07:48 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51009, Process: explorer.exe)2013/12/04 18:09:01 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51299, Process: explorer.exe)2013/12/04 18:18:39 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51521, Process: explorer.exe)2013/12/04 18:18:48 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51523, Process: explorer.exe)2013/12/04 18:18:48 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51527, Process: explorer.exe)2013/12/04 18:19:28 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51625, Process: explorer.exe)2013/12/04 18:20:17 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51766, Process: explorer.exe)2013/12/04 18:22:50 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51996, Process: explorer.exe)2013/12/04 18:22:50 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52005, Process: explorer.exe)2013/12/04 18:22:58 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52027, Process: explorer.exe)2013/12/04 18:23:55 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52300, Process: explorer.exe)2013/12/04 18:23:55 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52305, Process: explorer.exe)2013/12/04 18:25:56 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52426, Process: explorer.exe)2013/12/04 18:27:24 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52500, Process: explorer.exe)2013/12/04 18:27:32 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52502, Process: explorer.exe)2013/12/04 18:27:33 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52513, Process: explorer.exe)2013/12/04 18:29:09 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52643, Process: explorer.exe)2013/12/04 18:29:49 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 52805, Process: explorer.exe)2013/12/04 18:32:17 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 53091, Process: explorer.exe)2013/12/04 18:34:02 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 53451, Process: explorer.exe)2013/12/04 18:35:15 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 53636, Process: explorer.exe)2013/12/04 18:35:39 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 53697, Process: explorer.exe)2013/12/04 18:37:24 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 54164, Process: explorer.exe)2013/12/04 18:37:32 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 54242, Process: explorer.exe)2013/12/04 18:38:20 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 54416, Process: explorer.exe)2013/12/04 18:39:57 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 54745, Process: explorer.exe)2013/12/04 18:39:57 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 54746, Process: explorer.exe)2013/12/04 18:40:53 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 54907, Process: explorer.exe)2013/12/04 18:42:22 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 55067, Process: explorer.exe)2013/12/04 18:42:30 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55079, Process: explorer.exe)2013/12/04 18:43:35 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 55148, Process: explorer.exe)2013/12/04 18:46:50 -0500 LINDA-HP (null) MESSAGE Starting protection2013/12/04 18:46:51 -0500 LINDA-HP (null) MESSAGE Protection started successfully2013/12/04 18:46:51 -0500 LINDA-HP (null) MESSAGE Starting IP protection2013/12/04 18:46:56 -0500 LINDA-HP (null) MESSAGE IP Protection started successfully2013/12/04 19:15:35 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49216, Process: explorer.exe)2013/12/04 19:15:35 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49236, Process: explorer.exe)2013/12/04 19:15:35 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49240, Process: explorer.exe)2013/12/04 19:16:55 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49417, Process: explorer.exe)2013/12/04 19:18:40 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49447, Process: explorer.exe)2013/12/04 19:18:40 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49448, Process: explorer.exe)2013/12/04 19:19:45 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49457, Process: explorer.exe)2013/12/04 19:20:17 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49467, Process: explorer.exe)2013/12/04 19:21:22 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49486, Process: explorer.exe)2013/12/04 19:21:22 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49490, Process: explorer.exe)2013/12/04 19:21:22 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49493, Process: explorer.exe)2013/12/04 19:22:26 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49775, Process: explorer.exe)2013/12/04 19:23:55 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49839, Process: explorer.exe)2013/12/04 19:23:55 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49843, Process: explorer.exe)2013/12/04 19:24:44 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49985, Process: explorer.exe)2013/12/04 19:25:40 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50011, Process: explorer.exe)2013/12/04 19:25:40 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50066, Process: explorer.exe)2013/12/04 19:26:36 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50091, Process: explorer.exe)2013/12/04 19:26:45 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50093, Process: explorer.exe)2013/12/04 19:27:57 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50102, Process: explorer.exe)2013/12/04 19:27:57 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50105, Process: explorer.exe)2013/12/04 19:29:09 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50214, Process: explorer.exe)2013/12/04 19:30:06 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50228, Process: explorer.exe)2013/12/04 19:30:06 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50229, Process: explorer.exe)2013/12/04 19:31:11 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50451, Process: explorer.exe)2013/12/04 19:31:11 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50493, Process: explorer.exe)2013/12/04 19:32:07 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50514, Process: explorer.exe)2013/12/04 19:32:15 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50516, Process: explorer.exe)2013/12/04 19:33:12 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50751, Process: explorer.exe)2013/12/04 19:33:28 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50768, Process: explorer.exe)2013/12/04 19:35:05 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50969, Process: explorer.exe)2013/12/04 19:35:05 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50971, Process: explorer.exe)2013/12/04 19:36:35 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51253, Process: explorer.exe)2013/12/04 19:37:15 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51309, Process: explorer.exe)2013/12/04 19:37:15 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51312, Process: explorer.exe)2013/12/04 19:39:32 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51713, Process: explorer.exe)2013/12/04 19:39:32 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51716, Process: explorer.exe)2013/12/04 19:40:53 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51781, Process: explorer.exe)2013/12/04 19:42:29 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52019, Process: explorer.exe)2013/12/04 19:42:30 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52021, Process: explorer.exe)2013/12/04 19:43:34 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52288, Process: explorer.exe)2013/12/04 19:44:30 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52300, Process: explorer.exe)2013/12/04 19:45:35 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52310, Process: explorer.exe)2013/12/04 19:46:31 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52355, Process: explorer.exe)2013/12/04 19:47:36 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52565, Process: explorer.exe)2013/12/04 19:47:36 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 52577, Process: explorer.exe)2013/12/04 19:50:34 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 53399, Process: explorer.exe)2013/12/04 19:52:27 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 53933, Process: explorer.exe)2013/12/04 19:52:27 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 53942, Process: explorer.exe)2013/12/04 19:52:35 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 53954, Process: explorer.exe)2013/12/04 19:54:29 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 54631, Process: explorer.exe)2013/12/04 19:55:42 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 54887, Process: explorer.exe)2013/12/04 19:55:42 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 54895, Process: explorer.exe)2013/12/04 19:55:42 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 54896, Process: explorer.exe)2013/12/04 19:57:19 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 55388, Process: explorer.exe)2013/12/04 19:58:23 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55546, Process: explorer.exe)2013/12/04 20:00:24 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55837, Process: explorer.exe)2013/12/04 20:01:21 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55958, Process: explorer.exe)2013/12/04 20:01:21 -0500 LINDA-HP Linda IP-BLOCK 5.149.255.46 (Type: outgoing, Port: 55962, Process: explorer.exe)2013/12/04 20:02:18 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 56180, Process: explorer.exe)2013/12/04 20:03:22 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 56434, Process: explorer.exe)2013/12/04 20:04:19 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 56690, Process: explorer.exe)2013/12/04 20:04:59 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 56820, Process: explorer.exe)2013/12/04 20:05:56 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 56971, Process: explorer.exe)2013/12/04 20:06:04 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 57000, Process: explorer.exe)2013/12/04 20:07:00 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 57374, Process: explorer.exe)2013/12/04 20:10:06 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 58029, Process: explorer.exe)2013/12/04 20:11:11 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 58461, Process: explorer.exe)2013/12/04 20:12:16 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 58619, Process: explorer.exe)2013/12/04 20:14:09 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59183, Process: explorer.exe)2013/12/04 20:14:41 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59270, Process: explorer.exe)2013/12/04 20:17:23 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59817, Process: explorer.exe)2013/12/04 20:19:08 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 60443, Process: explorer.exe)2013/12/04 20:20:45 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 60873, Process: explorer.exe)2013/12/04 20:21:58 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61135, Process: explorer.exe)2013/12/04 20:21:58 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61136, Process: explorer.exe)2013/12/04 20:23:19 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 61400, Process: explorer.exe)2013/12/04 20:24:51 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61527, Process: explorer.exe)2013/12/04 20:24:59 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61538, Process: explorer.exe)2013/12/04 20:26:20 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 61747, Process: explorer.exe)2013/12/04 20:26:21 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61750, Process: explorer.exe)2013/12/04 20:28:39 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 61765, Process: explorer.exe)2013/12/04 20:28:47 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61767, Process: explorer.exe)2013/12/04 20:30:41 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 61791, Process: explorer.exe)2013/12/04 20:30:41 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61794, Process: explorer.exe)2013/12/04 20:33:30 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62074, Process: explorer.exe)2013/12/04 20:34:59 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62094, Process: explorer.exe)2013/12/04 20:36:20 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62256, Process: explorer.exe)2013/12/04 20:37:33 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62272, Process: explorer.exe)2013/12/04 20:37:33 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62280, Process: explorer.exe)2013/12/04 20:40:31 -0500 LINDA-HP Linda IP-BLOCK 162.210.192.80 (Type: outgoing, Port: 62610, Process: explorer.exe)2013/12/04 20:43:15 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62873, Process: explorer.exe)2013/12/04 20:44:04 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63010, Process: explorer.exe)2013/12/04 20:45:33 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 63023, Process: explorer.exe)2013/12/04 20:45:41 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63029, Process: explorer.exe)2013/12/04 20:46:46 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63077, Process: explorer.exe)2013/12/04 20:48:15 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63096, Process: explorer.exe)2013/12/04 20:49:28 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 63105, Process: explorer.exe)2013/12/04 20:49:28 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63107, Process: explorer.exe)2013/12/04 20:52:49 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 63246, Process: explorer.exe)2013/12/04 20:52:49 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63249, Process: explorer.exe)2013/12/04 20:56:49 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63596, Process: explorer.exe)2013/12/04 20:58:50 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63696, Process: explorer.exe)2013/12/04 21:02:06 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64090, Process: explorer.exe)2013/12/04 21:02:08 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 64091, Process: explorer.exe)2013/12/04 21:03:14 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64262, Process: explorer.exe)2013/12/04 21:06:31 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64681, Process: explorer.exe)2013/12/04 21:07:37 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64752, Process: explorer.exe)2013/12/04 21:10:19 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64943, Process: explorer.exe)2013/12/04 21:11:16 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64988, Process: explorer.exe)2013/12/04 21:12:20 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65093, Process: explorer.exe)2013/12/04 21:14:21 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65336, Process: explorer.exe)2013/12/04 21:15:18 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65356, Process: explorer.exe)2013/12/04 21:17:43 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49226, Process: explorer.exe)2013/12/04 21:18:32 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49231, Process: explorer.exe)2013/12/04 21:20:34 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49374, Process: explorer.exe)2013/12/04 21:25:34 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50019, Process: explorer.exe)2013/12/04 21:28:26 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50184, Process: explorer.exe)2013/12/04 21:30:36 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50369, Process: explorer.exe)2013/12/04 21:31:42 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50486, Process: explorer.exe)2013/12/04 21:31:42 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50488, Process: explorer.exe)2013/12/04 21:32:55 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50872, Process: explorer.exe)2013/12/04 21:34:00 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50910, Process: explorer.exe)2013/12/04 21:34:09 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50913, Process: explorer.exe)2013/12/04 21:36:43 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51050, Process: explorer.exe)2013/12/04 21:42:47 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 51702, Process: explorer.exe)2013/12/04 21:42:56 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 51746, Process: explorer.exe)2013/12/04 21:46:43 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52309, Process: explorer.exe)2013/12/04 21:47:48 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 52316, Process: explorer.exe)2013/12/04 21:47:49 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52320, Process: explorer.exe)2013/12/04 21:50:14 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52470, Process: explorer.exe)2013/12/04 21:52:48 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52666, Process: explorer.exe)2013/12/04 21:55:31 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 52884, Process: explorer.exe)2013/12/04 21:56:20 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 53005, Process: explorer.exe)2013/12/04 21:57:42 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 53228, Process: explorer.exe)2013/12/04 22:00:00 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 53264, Process: explorer.exe)2013/12/04 22:00:40 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 53280, Process: explorer.exe)2013/12/04 22:00:41 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 53283, Process: explorer.exe)2013/12/04 22:02:46 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 53617, Process: explorer.exe)2013/12/04 22:04:24 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 53807, Process: explorer.exe)2013/12/04 22:05:30 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 53823, Process: explorer.exe)2013/12/04 22:05:38 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 53832, Process: explorer.exe)2013/12/04 22:06:43 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 53999, Process: explorer.exe)2013/12/04 22:10:07 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 54184, Process: explorer.exe)2013/12/04 22:11:36 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 54259, Process: explorer.exe)2013/12/04 22:11:45 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 54265, Process: explorer.exe)2013/12/04 22:14:19 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 54457, Process: explorer.exe)2013/12/04 22:17:10 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 54619, Process: explorer.exe)2013/12/04 22:17:19 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 54622, Process: explorer.exe)2013/12/04 22:20:04 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 54964, Process: explorer.exe)2013/12/04 22:21:19 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55180, Process: explorer.exe)2013/12/04 22:23:38 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55304, Process: explorer.exe)2013/12/04 22:24:27 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55323, Process: explorer.exe)2013/12/04 22:27:01 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55464, Process: explorer.exe)2013/12/04 22:28:14 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 55518, Process: explorer.exe)2013/12/04 22:29:28 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55540, Process: explorer.exe)2013/12/04 22:31:06 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 55940, Process: explorer.exe)2013/12/04 22:32:25 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 55951, Process: explorer.exe)2013/12/04 22:34:20 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 56097, Process: explorer.exe)2013/12/04 22:37:44 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 56321, Process: explorer.exe)2013/12/04 22:37:44 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 56332, Process: explorer.exe)2013/12/04 22:39:22 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 56454, Process: explorer.exe)2013/12/04 22:40:43 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 56550, Process: explorer.exe)2013/12/04 22:42:04 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 56610, Process: explorer.exe)2013/12/04 22:42:07 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 56618, Process: explorer.exe)2013/12/04 22:44:01 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 56671, Process: explorer.exe)2013/12/04 22:44:04 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 56674, Process: explorer.exe)2013/12/04 22:46:14 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 56890, Process: explorer.exe)2013/12/04 22:47:29 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 56918, Process: explorer.exe)2013/12/04 22:48:26 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 56961, Process: explorer.exe)2013/12/04 22:49:54 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 57000, Process: explorer.exe)2013/12/04 22:51:15 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 57011, Process: explorer.exe)2013/12/04 22:52:19 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 57020, Process: explorer.exe)2013/12/04 22:53:40 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 57203, Process: explorer.exe)2013/12/04 22:53:48 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 57218, Process: explorer.exe)2013/12/04 22:54:52 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 57264, Process: explorer.exe)2013/12/04 22:56:45 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 57383, Process: explorer.exe)2013/12/04 22:56:45 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 57387, Process: explorer.exe)2013/12/04 22:56:45 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 57389, Process: explorer.exe)2013/12/04 22:59:34 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 57762, Process: explorer.exe)2013/12/04 23:01:19 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 58018, Process: explorer.exe)2013/12/04 23:02:16 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 58077, Process: explorer.exe)2013/12/04 23:02:16 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 58080, Process: explorer.exe)2013/12/04 23:04:25 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 58596, Process: explorer.exe)2013/12/04 23:04:25 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 58600, Process: explorer.exe)2013/12/04 23:05:22 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 58952, Process: explorer.exe)2013/12/04 23:06:26 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59133, Process: explorer.exe)2013/12/04 23:06:26 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59137, Process: explorer.exe)2013/12/04 23:08:11 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59419, Process: explorer.exe)2013/12/04 23:09:40 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59564, Process: explorer.exe)2013/12/04 23:13:02 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 59962, Process: explorer.exe)2013/12/04 23:13:02 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59977, Process: explorer.exe)2013/12/04 23:13:10 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 59980, Process: explorer.exe)2013/12/04 23:14:38 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 59995, Process: explorer.exe)2013/12/04 23:14:38 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 60005, Process: explorer.exe)2013/12/04 23:16:31 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 60020, Process: explorer.exe)2013/12/04 23:16:31 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 60021, Process: explorer.exe)2013/12/04 23:17:27 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 60028, Process: explorer.exe)2013/12/04 23:18:40 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 60238, Process: explorer.exe)2013/12/04 23:20:17 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 60537, Process: explorer.exe)2013/12/04 23:22:50 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61003, Process: explorer.exe)2013/12/04 23:25:40 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61703, Process: explorer.exe)2013/12/04 23:25:48 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 61750, Process: explorer.exe)2013/12/04 23:26:37 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62017, Process: explorer.exe)2013/12/04 23:29:03 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62623, Process: explorer.exe)2013/12/04 23:29:03 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 62636, Process: explorer.exe)2013/12/04 23:30:00 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 62832, Process: explorer.exe)2013/12/04 23:31:37 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63330, Process: explorer.exe)2013/12/04 23:34:27 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 63834, Process: explorer.exe)2013/12/04 23:37:48 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 64285, Process: explorer.exe)2013/12/04 23:38:45 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 64415, Process: explorer.exe)2013/12/04 23:39:50 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 64762, Process: explorer.exe)2013/12/04 23:41:59 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65047, Process: explorer.exe)2013/12/04 23:43:11 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65143, Process: explorer.exe)2013/12/04 23:44:32 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65235, Process: explorer.exe)2013/12/04 23:44:32 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65236, Process: explorer.exe)2013/12/04 23:45:44 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65299, Process: explorer.exe)2013/12/04 23:46:41 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65312, Process: explorer.exe)2013/12/04 23:47:54 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 65326, Process: explorer.exe)2013/12/04 23:48:51 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 65496, Process: explorer.exe)2013/12/04 23:49:55 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49236, Process: explorer.exe)2013/12/04 23:50:51 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49423, Process: explorer.exe)2013/12/04 23:54:05 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49882, Process: explorer.exe)2013/12/04 23:54:13 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49886, Process: explorer.exe)2013/12/04 23:55:50 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50426, Process: explorer.exe)2013/12/04 23:57:11 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50610, Process: explorer.exe)2013/12/04 23:58:15 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 50740, Process: explorer.exe)2013/12/04 23:59:28 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 50975, Process: explorer.exe)

You can see a snapshot of the problem processes in Resource monitor and if I suspend then terminate them... I can watch the TCP connection count drop to near 0...

I've ran every scanner out there and the one listed in posts here and the "I'm infected post.."

Rogue Killer:

RogueKiller V8.7.10 _x64_ [Nov 25 2013] by Tigzymail : tigzyRK<at>gmail<dot>comFeedback : http://www.adlice.com/forum/Website : http://www.adlice.com/softwares/roguekiller/Blog : http://tigzyrk.blogspot.com/Operating System : Windows 7 (6.1.7600 ) 64 bits versionStarted in : Normal modeUser : Linda [Admin rights]Mode : Scan -- Date : 12/04/2013 10:36:26| ARK || FAK || MBR |¤¤¤ Bad processes : 0 ¤¤¤¤¤¤ Registry Entries : 7 ¤¤¤[RUN][SUSP PATH] HKCU\[...]\Run : AVG-Secure-Search-Update_1113a (C:\Users\Linda\AppData\Roaming\AVG 1113a Campaign\AVG-Secure-Search-Update-1113a.exe /PROMPT /mid=01cf3f72709a47d3a12805cc22405db0-9cc06ce573b97f0fd80d4cb0c7a9fb50b83aff2b /CMPID=1113a [x][x]) -> FOUND[RUN][SUSP PATH] HKUS\S-1-5-21-1261503980-111145729-2002240722-1000\[...]\Run : AVG-Secure-Search-Update_1113a (C:\Users\Linda\AppData\Roaming\AVG 1113a Campaign\AVG-Secure-Search-Update-1113a.exe /PROMPT /mid=01cf3f72709a47d3a12805cc22405db0-9cc06ce573b97f0fd80d4cb0c7a9fb50b83aff2b /CMPID=1113a [x][x]) -> FOUND[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> FOUND[HJ POL][PUM] HKLM\[...]\Wow6432Node\[...]\System : EnableLUA (0) -> FOUND[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND[HJ INPROC][SUSP PATH] HKCR\[...]\InprocServer32 :  (\\?\globalroot\Device\HarddiskVolume2\Users\Linda\AppData\Local\Temp\sixrwvf\sbmpshr\wow.dll [x]) -> FOUND¤¤¤ Scheduled tasks : 0 ¤¤¤¤¤¤ Startup Entries : 0 ¤¤¤¤¤¤ Web browsers : 0 ¤¤¤¤¤¤ Particular Files / Folders: ¤¤¤¤¤¤ Driver : [NOT LOADED 0x0] ¤¤¤¤¤¤ External Hives: ¤¤¤¤¤¤ Infection :  ¤¤¤¤¤¤ HOSTS File: ¤¤¤--> %SystemRoot%\System32\drivers\etc\hosts127.0.0.1 s.ppojl.net¤¤¤ MBR Check: ¤¤¤+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Hitachi HDS721064CLA332 SATA Disk Device +++++--- User ---[MBR] 1f46cb91dba4724bb6b943f7903879b3[BSP] d79676a9e8df08d6b16a08d0f3d6ebe9 : Windows Vista/7/8 MBR CodePartition table:0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 100 Mo1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 206848 | Size: 598128 Mo2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 1225172992 | Size: 12250 MoUser = LL1 ... OK!User = LL2 ... OK!+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ USB) WD My Book 1110 USB Device +++++--- User ---[MBR] 501e0d6900b18b534a9fcc91650fc670[BSP] d17cd76fdfd3323b5fe85b518ea94d94 : Windows XP MBR CodePartition table:0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 953198 MoUser = LL1 ... OK!Error reading LL2 MBR! ([0x32] The request is not supported. )Finished : << RKreport[0]_S_12042013_103626.txt >>

HijackThis:

Nothing finds it.

Any one see what these programs are not finding???

Thanks in advance.

Addition.txt FRST.txt

winboned · December 8, 2013

Any suggestions at all on this system?

Other software??

Or it is just hopeless and reformat?

Thanks.

Maurice Naggar · December 8, 2013

Hello winboned and welcome to Malwarebytes forum.

In case you are being helped already elsewhere, please stop and tell me where.

If you are self-medicating, please stop doing so, and follow my guidance.

It is important that you are not being helped in two venues at once. We do not want conflicts or the like.

It is important that you follow my guidance. If you have questions, please stop and ask me first.

Do not do any further fixes or changes on your own.

Show all files in Windows 7:

Press and hold Windows-key+E key on keyboard to start Windows Explorer.

From the Windows Explorer menu options, Select Tools, then Folder Options.

Next click the View tab.

Locate and uncheck "Hide protected operating system files (Recommended).

Locate and click "Show hidden files and folders and drives. "

Click Apply > OK.

I see that you have used Roguekiller, Hijackthis, and some others as well, like FRST.

Step 2

You appear to have run FRSTx64 from within Windows. at C:\Users\Linda\Downloads

Save the attached FIXLIST.txt to the same location where you currently have FRSTx64

Now, close your browser and then also any other window that may be open or running. eg, close all your programs.

Run FRSTx64.exe and click Fix only once and wait

The tool will create a log (Fixlog.txt) in the folder, please attach it into your reply.

Step 3

Temporarily turn off (disable) your antivirus program

How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Start your MBAM MalwareBytes' Anti-Malware.

Click the Settings Tab and then the General Settings sub-tab. Make sure all option lines have a checkmark.

Then click the Scanner settings sub-tab in second row of tabs. Make sure all option lines have a checkmark.

look down the screen to Action for potentially unwanted programs PUP < = = VERY Important

& look down the screen to Action for potentially unwanted modifications PUM &

& Action for peer-to-peer software P2P

For each one of the 3 by clicking the down arrow ( on each one, one at a time ) ***

select "Show in results list and check for removal" from the drop down (arrow) selections. < = = =

Next, Click the Update tab. Press the "Check for Updates" button.

If prompted for a Restart, do that.

When done, click the Scanner tab.

Do a Full Scan.

When the scan is complete, click OK, then Show Results to view the results.

Make sure that everything is checked, and click Remove Selected.

When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.

When all done, Copy & paste the MBAM scan log into a new reply.

Tell me, How is the system ?

Re-Enable your antivirus program.

Don't go away, as there will be more to do for later.

winboned · December 9, 2013

In case you are being helped already elsewhere, please stop and tell me where.
If you are self-medicating, please stop doing so, and follow my guidance.
It is important that you are not being helped in two venues at once. We do not want conflicts or the like.

No other venues are being used.

Show all files in Windows 7:
Press and hold Windows-key+E key on keyboard to start Windows Explorer.
From the Windows Explorer menu options, Select Tools, then Folder Options.
Next click the View tab.
Locate and uncheck "Hide protected operating system files (Recommended).
Locate and click "Show hidden files and folders and drives. "
Click Apply > OK.

Done.

I see that you have used Roguekiller, Hijackthis, and some others as well, like FRST.
Step 2
You appear to have run FRSTx64 from within Windows. at C:\Users\Linda\Downloads
Save the attached FIXLIST.txt to the same location where you currently have FRSTx64

No attachment in message.

Awaiting attachment to proceed further.

Maurice Naggar · December 9, 2013

Hello,

Sorry, my bad. Attached here is the FIXLIST

Be sure to save it to the same ( folder ) location as FRST.exe

Then please do as I had outlined before.

Regards,

Cheers.

Fixlist.txt

winboned · December 10, 2013

Hello,

Sorry, my bad. Attached here is the FIXLIST

Be sure to save it to the same ( folder ) location as FRST.exe

Then please do as I had outlined before.

FRST Fix log:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-12-2013

Ran by Linda at 2013-12-10 14:37:06 Run:1

Running from C:\Users\Linda\Downloads

Boot Mode: Normal

==============================================

Content of fixlist:

*****************

start

HKLM-x32\...\Run: [] - [x]

HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1707472 2013-11-08] (APN)

HKLM-x32\...\Run: [VNT] - C:\Program Files (x86)\VNT\vntldr.exe [202192 2013-11-08] (APN LLC.)

HKU\cfc1020\...\Run: [plagnb] - "C:\Windows\System32\rundll32.exe" "C:\Users\cfc1020\AppData\Roaming\plagnb.dll",GetLocals

HKU\cfc1020\...\Run: [csdiwmle] - "C:\Users\cfc1020\AppData\Local\dalkbhik.exe"

HKU\cfc1020\...\Run: [AS2014] - C:\ProgramData\gVrlXns3\gVrlXns3.exe

HKU\cfc1020\...\Run: [wstsr] - rundll32.exe "C:\Users\cfc1020\AppData\Roaming\wstsr.dll",List_Type

HKU\cfc1020\...\Run: [idsbt] - rundll32.exe "C:\Users\cfc1020\AppData\Roaming\idsbt.dll",Module_GetFilename

HKU\cfc1020\...\Run: [oclwsp] - rundll32.exe "C:\Users\cfc1020\AppData\Roaming\oclwsp.dll",Long_FromVoidPtr

HKU\cfc1020\...\Run: [Kedyhagievobedw] - C:\Users\Linda\AppData\Roaming\Apzovit\azovcu.exe

URLSearchHook: HKCU - SearchHook Class - {D8278076-BC68-4484-9233-6E7F1628B56C} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\searchhook.dll (APN LLC.)

SearchScopes: HKLM - {38D3E3F9-E6E0-4F73-8033-CF549EE8D56D} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpd

SearchScopes: HKLM-x32 - {09971cee-01b8-42bc-9d91-456b1faad6be} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=CDxdm003R9us&ptnrS=CDxdm003R9us&si=CMS4qNid4qsCFRFR7AodaWDpOg&ptb=848AE040-2DFF-4D00-9656-EB7F42FE94FA&ind=2011101415&n=77def8e7&psa=&st=sb&searchfor={searchTerms}

SearchScopes: HKLM-x32 - {38D3E3F9-E6E0-4F73-8033-CF549EE8D56D} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpd

SearchScopes: HKCU - {09971cee-01b8-42bc-9d91-456b1faad6be} URL = http://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=CDxdm003R9us&ptb=848AE040-2DFF-4D00-9656-EB7F42FE94FA&ind=2011101123&ptnrS=CDxdm003R9us&si=CMS4qNid4qsCFRFR7AodaWDpOg&n=77def7c3&psa=&st=sb&searchfor={searchTerms}

SearchScopes: HKCU - {38D3E3F9-E6E0-4F73-8033-CF549EE8D56D} URL = http://www.ask.com/web?q={searchterms}&l=dis&o=ushpd

BHO: Avery Toolbar - {41565232-5636-006A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVR2V6\Passport_x64.dll (APN LLC.)

BHO-x32: Avery Toolbar - {41565232-5636-006A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVR2V6\Passport.dll (APN LLC.)

Toolbar: HKLM - Avery Toolbar - {41565232-5636-006A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVR2V6\Passport_x64.dll (APN LLC.)

Toolbar: HKLM-x32 - Avery Toolbar - {41565232-5636-006A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVR2V6\Passport.dll (APN LLC.)

Toolbar: HKCU - Avery Toolbar - {41565232-5636-006A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVR2V6\Passport_x64.dll (APN LLC.)

CHR Extension: (Avery Toolbar) - C:\Users\Linda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaldpnffcdieehinphlijifieiockj\26.61251_0

CHR HKLM-x32\...\Chrome\Extension: [aaaaldpnffcdieehinphlijifieiockj] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVR2V6\CRX\ToolbarCR.crx

end

*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ApnTBMon => Value deleted successfully.

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\VNT => Value deleted successfully.

HKU\cfc1020\Software\Microsoft\Windows\CurrentVersion\Run\\plagnb => Value not found.

HKU\cfc1020\Software\Microsoft\Windows\CurrentVersion\Run\\csdiwmle => Value not found.

HKU\cfc1020\Software\Microsoft\Windows\CurrentVersion\Run\\AS2014 => Value not found.

HKU\cfc1020\Software\Microsoft\Windows\CurrentVersion\Run\\wstsr => Value not found.

HKU\cfc1020\Software\Microsoft\Windows\CurrentVersion\Run\\idsbt => Value not found.

HKU\cfc1020\Software\Microsoft\Windows\CurrentVersion\Run\\oclwsp => Value not found.

HKU\cfc1020\Software\Microsoft\Windows\CurrentVersion\Run\\Kedyhagievobedw => Value not found.

HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{D8278076-BC68-4484-9233-6E7F1628B56C} => Value deleted successfully.

HKCR\Wow6432Node\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{38D3E3F9-E6E0-4F73-8033-CF549EE8D56D} => Key deleted successfully.

HKCR\CLSID\{38D3E3F9-E6E0-4F73-8033-CF549EE8D56D} => Key not found.

HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{09971cee-01b8-42bc-9d91-456b1faad6be} => Key deleted successfully.

HKCR\Wow6432Node\CLSID\{09971cee-01b8-42bc-9d91-456b1faad6be} => Key not found.

HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{38D3E3F9-E6E0-4F73-8033-CF549EE8D56D} => Key deleted successfully.

HKCR\Wow6432Node\CLSID\{38D3E3F9-E6E0-4F73-8033-CF549EE8D56D} => Key not found.

HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{09971cee-01b8-42bc-9d91-456b1faad6be} => Key deleted successfully.

HKCR\CLSID\{09971cee-01b8-42bc-9d91-456b1faad6be} => Key not found.

HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{38D3E3F9-E6E0-4F73-8033-CF549EE8D56D} => Key deleted successfully.

HKCR\CLSID\{38D3E3F9-E6E0-4F73-8033-CF549EE8D56D} => Key not found.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41565232-5636-006A-76A7-7A786E7484D7} => Key deleted successfully.

HKCR\CLSID\{41565232-5636-006A-76A7-7A786E7484D7} => Key deleted successfully.

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41565232-5636-006A-76A7-7A786E7484D7} => Key deleted successfully.

HKCR\Wow6432Node\CLSID\{41565232-5636-006A-76A7-7A786E7484D7} => Key deleted successfully.

HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{41565232-5636-006A-76A7-7A786E7484D7} => Value deleted successfully.

HKCR\CLSID\{41565232-5636-006A-76A7-7A786E7484D7} => Key not found.

HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{41565232-5636-006A-76A7-7A786E7484D7} => Value deleted successfully.

HKCR\Wow6432Node\CLSID\{41565232-5636-006A-76A7-7A786E7484D7} => Key not found.

HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{41565232-5636-006A-76A7-7A786E7484D7} => Value deleted successfully.

HKCR\CLSID\{41565232-5636-006A-76A7-7A786E7484D7} => Key not found.

C:\Users\Linda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaldpnffcdieehinphlijifieiockj => Moved successfully.

HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\aaaaldpnffcdieehinphlijifieiockj => Key deleted successfully.

C:\ProgramData\AskPartnerNetwork\Toolbar\AVR2V6\CRX\ToolbarCR.crx => Moved successfully.

==== End of Fixlog ====

MBAM Log:

Malwarebytes Anti-Malware (Trial) 1.75.0.1300

www.malwarebytes.org

Database version: v2013.12.10.02

Windows 7 x64 NTFS

Internet Explorer 9.0.8112.16421

Linda :: LINDA-HP [administrator]

Protection: Enabled

12/10/2013 3:01:32 PM

mbam-log-2013-12-10 (15-01-32).txt

Scan type: Full scan (C:\|)

Scan options disabled:

Objects scanned: 646111

Time elapsed: 1 hour(s), 40 minute(s), 26 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 0

(No malicious items detected)

(end)

No change... MBAM found attempted connections and the malware explore.exe processes started up during the scan:

2013/12/10 15:01:22 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49201, Process: explorer.exe)

2013/12/10 15:01:22 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49206, Process: explorer.exe)

2013/12/10 15:01:22 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49217, Process: explorer.exe)

2013/12/10 15:01:30 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49262, Process: explorer.exe)

2013/12/10 16:35:12 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49756, Process: explorer.exe)

2013/12/10 16:35:20 -0500 LINDA-HP Linda IP-BLOCK 88.214.193.174 (Type: outgoing, Port: 49760, Process: explorer.exe)

2013/12/10 16:35:20 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49764, Process: explorer.exe)

2013/12/10 16:35:29 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 49783, Process: explorer.exe)

2013/12/10 16:35:29 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 49784, Process: explorer.exe)

2013/12/10 16:35:29 -0500 LINDA-HP Linda IP-BLOCK 8.26.70.22 (Type: outgoing, Port: 49785, Process: explorer.exe)

2013/12/10 16:35:29 -0500 LINDA-HP Linda IP-BLOCK 66.45.56.109 (Type: outgoing, Port: 49787, Process: explorer.exe)

==

Maurice Naggar · December 11, 2013

These steps ( and Topic ) are for member winboned only. If you are a casual viewer, do NOT try this on your system!

If you are not "winboned" and have a similar problem, do NOT post here; start your own topic

Hello,

(a) Explorer.exe is not malware. It is Windows Explorer of your Windows system. It includes the visible GUI of your operating system. I would not "rely" that you are being shown the right offender.

(b)

The Malwarebytes Anti-Malware Website Blocking feature will advise users when an known malicious IP is attempted to be reached(outgoing) or is trying access your PC(incoming).

Incoming threats can be ignored, our software is blocking the attack and there is nothing more that can be done.

No action is required unless you're also experiencing malware symptoms or there are multiple IPs(ex;123.23.34 and 4.44.56).

A browser is not required to be running, just an active Internet connection with processes running,

such as Instant messenger clients, SKYPE or P2P software to trigger these alerts.

These are also triggered by banner ads running on websites which is the most common form of alert

Windows Vista and Windows 7 & 8 will show the process, but Windows XP does not have the structure in place for this to be displayed by our software

Please see/review this reference on MBAM's IP blocks

http://helpdesk.malwarebytes.org/entries/23482998

Please see the link below which contains our FAQ's(including reporting false\positives and adding IPs to ignore) on this feature for more information:

http://www.malwarebytes.org/forums/index.php?showtopic=21076&st=0#entry107310

(c ) Does your system have installed an always on instant messenger program ?

(d)

Please run the Windows' System File Checker utility:

Start >> type in cmd >> press the Ctrl+Shift+Enter keyboard combination and cmd.exe will be launched as if you selected Run as Administrator. You will then see a User Account Control prompt asking if you would like to allow the Command Prompt to be able to make changes on your computer. Click on the Yes button and you will now be at the Elevated Command Prompt.
Type into the command=prompt window
```
sfc /scannow
```
Then tap Enter
You should see on-screen status messages similar to these:
..Beginning the system scan. This process will take some time.
..Beginning verification phase of system scan.
..Verification % complete.
Once the scan has completed you will receive an onscreen message resembling one of the following:
..found no integrity violations
..found corruption but repaired it
..found corruption that it could not repair
Please advise on the result.
( E )
You will want to print out or copy these instructions to Notepad for offline reference!
Do not run or start any other programs while these utilities and tools are in use!
Do NOT run any other tools on your own or do any fixes other than what is listed here.
If you have questions, please ask before you do something on your own.
But it is important that you get going on these following steps.
=
Close any of your open programs while you run these tools.
On most all of the following programs and tools, you will need to do a right-click on the program link or shortcut or desktop icon (as appropriate) and then select "Run as Administrator". Please remember that as you go along and use these tools, each in turn.
If you have a prior copy of Combofix, delete it now
Download Combofix from any of the links below, and SAVE it to your Desktop.
Link 1
Link 2
**Note: It is important that it is saved directly to your Desktop and not run straight away from download **
Turn OFF your antivirus, otherwise it will interfere. How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs
Have infinite patience during the run & scan by Combofix. It has many phases: some 50+ stages
It will display it's "stage" within the Command prompt window. Do NOT panic if it seems slow to change ! It has lots of work.
You may notice the desktop icons disappear. Do NOT panic, as that is expected behavior.
Combofix my take as little as 10 minutes and perhaps as much as 30-40 minutes. Time taken will depend on speed of your system and how much there is to scan & how much it needs to clean.
If this is on a notebook system, make sure first the notebook is connected to wall-power (AC power)or a UPS system
Important: Have no other programs running. Your Task Bar should be clear of any program entries including your Browser.
Right- click on Combo-Fix.exe on your Desktop and select "Run as Administrator".
- A window may open with a warning or prompts. Accept the EULA and follow the prompts during the start phase of Combofix.
  When the scan completes Notepad will open with with your results log open. Do a File, Exit and answer 'Yes' to save changes.
A caution - Do not run Combofix more than once.
Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock.
The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled.
If this occurs, please reboot to restore the desktop.
A file will be created at => C:\Combofix.txt.
Notes:
[1] IF after Combofix reboot you get the message

Illegal operation attempted on registry key that has been marked for deletion
....please reboot the computer, this should resolve the problem. You may have reboot the pc a second time if needed.
[2] Do not mouseclick combofix's window nor run any program while Combofix is running.
That may cause it to stall.
[3]When all done, IF Combofix did not do a Restart...then ... I need for you to Restart the system fresh
Reply & Copy & Paste contents of the C:\Combofix.txt log
and tell me, How is the system now
Re-enable your antivirus program.

Maurice Naggar · December 15, 2013

Hello Winboned,

How is it going? It has been several days now since I last replied to you. Please advise on current status.

Maurice Naggar · December 17, 2013

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Infected - nothing finds the problem...

Recommended Posts

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Recently Browsing 0 members

Important Information