168.28.176.11

[kevinf80]

First information link in this forum stickie does not work...

 

Can a mod check this thread: https://forums.malwarebytes.org/index.php?/topic/163137-cozahostexe-and-other-zoomify-files/page-5#entry926768

Malwarebytes flags the following after each threat scan (4 times) :

Registry Data: 4
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS|DhcpNameServer, 168.28.176.11 168.28.176.253 198.72.72.10, Good: (), Bad: (168.28.176.11),Replaced,[49b85a0f9ededb5b8bac2e5ee61fcc34]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS|DhcpNameServer, 168.28.176.11 168.28.176.253 198.72.72.10, Good: (), Bad: (168.28.176.253),Replaced,[10f1e4852e4ee55192a5820a719412ee]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{0FCC9FF9-FBA9-4F58-BA21-0341370EF0DD}|DhcpNameServer, 168.28.176.11 168.28.176.253 198.72.72.10, Good: (), Bad: (168.28.176.11),Replaced,[6f9266030c70e84e84b395f78f7627d9]
Trojan.DNSChanger, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP\PARAMETERS\Interfaces\{0FCC9FF9-FBA9-4F58-BA21-0341370EF0DD}|DhcpNameServer, 168.28.176.11 168.28.176.253 198.72.72.10, Good: (), Bad: (168.28.176.253),Replaced,[b54c06639ede54e23601bbd17590e020]
 
The IP`s do not show as malicious or suspect via an IP trace and locator search, also the poster does recognize them as legitimate.

 

Thank you,

 

Kevin...

[Spud]

Sorry for the dealy Kevin.

 

168.28.176.11

168.28.176.253

198.72.72.10

 

I am not seeing the IP's listed in the blocklist.

[kevinf80]

The issue occurs after a threat scan, the OP is running a tial version of Malwarebytes not Premium...