gdiloren Posted February 15, 2010 ID:200002 Share Posted February 15, 2010 I think that the extension LINK EXTENT 1.0.7 in FF v. 3.6 is not harmful, in anyway by uninstalling it you don't get pop-ups about 88.214.203.109 anymore. Link to post Share on other sites More sharing options...
gdiloren Posted February 15, 2010 Author ID:200005 Share Posted February 15, 2010 I think that the extension LINK EXTENT 1.0.7 in FF v. 3.6 is not harmful, in anyway by uninstalling it you don't get pop-ups about 88.214.203.109 anymore.I may add I use Vista SP2 and have absolutely no annoyance with the IP protection feature with IE8 or Google Chrome Beta v.5.0.322.2 Link to post Share on other sites More sharing options...
gdiloren Posted February 15, 2010 Author ID:200007 Share Posted February 15, 2010 I think that the extension LINK EXTENT 1.0.7 in FF v. 3.6 is not harmful, in anyway by uninstalling it you don't get pop-ups about 88.214.203.109 anymore.I may add I use Vista SP2 and have absolutely no annoyance with the IP protection feature with IE8 or Google Chrome Beta v.5.0.322.2 Link to post Share on other sites More sharing options...
MysteryFCM Posted February 15, 2010 ID:200336 Share Posted February 15, 2010 I'm not familiar with "Link Extent" as I don't use Firefox, but whether it's safe or not is irrelevant I'm afraid. 88.214.203.109 is on an IP range that is well known for malicious content. Link to post Share on other sites More sharing options...
gdiloren Posted February 17, 2010 Author ID:201280 Share Posted February 17, 2010 I'm not familiar with "Link Extent" as I don't use Firefox, but whether it's safe or not is irrelevant I'm afraid. 88.214.203.109 is on an IP range that is well known for malicious content.Ok. What do I do know. I'm getting many IP blocking pop-ups of various kinds, even with no browser on, and I scanned my PC for virus and malware thoroughly (use Avast 5.0.418 on acces and MBAM on access, have ST, SAS WD, SB). Here are the latest IP blocks today and yesterday:IP-BLOCK 94.96.74.35IP-BLOCK 117.199.5.104 I have Web Shield and Network Shield ON for all files scanning in RP of AVAST 5 + Comodo FW Defense + and a router secured. Should I be concerned? Haven't suffered IP-BLOCK 58.241.135.86 any damage to this day. IP-BLOCK 58.241.132.74IP-BLOCK 222.67.69.186IP-BLOCK 212.95.211.165IP-BLOCK 89.28.31.95IP-BLOCK 94.96.80.14IP-BLOCK 94.96.106.73 IP-BLOCK 81.23.121.126 IP-BLOCK 81.23.121.126 IP-BLOCK 81.23.121.126 IP-BLOCK 81.23.121.126 IP-BLOCK 81.23.121.126 IP-BLOCK 117.198.207.153 IP-BLOCK 81.23.121.126 IP-BLOCK 81.23.121.126 IP-BLOCK 81.23.121.126 IP-BLOCK 117.198.133.54 IP-BLOCK 124.217.225.37 IP-BLOCK 117.200.58.143 IP-BLOCK 117.197.16.18 IP-BLOCK 218.10.62.179 IP-BLOCK 117.199.118.171 Link to post Share on other sites More sharing options...
gdiloren Posted February 17, 2010 Author ID:201282 Share Posted February 17, 2010 Ok. What do I do know. I'm getting many IP blocking pop-ups of various kinds, even with no browser on, and I scanned my PC for virus and malware thoroughly (use Avast 5.0.418 on acces and MBAM on access, have ST, SAS WD, SB). Here are the latest IP blocks today and yesterday:IP-BLOCK 94.96.74.35IP-BLOCK 117.199.5.104 I have Web Shield and Network Shield ON for all files scanning in RP of AVAST 5 + Comodo FW Defense + and a router secured. Should I be concerned? Haven't suffered IP-BLOCK 58.241.135.86 any damage to this day. IP-BLOCK 58.241.132.74IP-BLOCK 222.67.69.186IP-BLOCK 212.95.211.165IP-BLOCK 89.28.31.95IP-BLOCK 94.96.80.14IP-BLOCK 94.96.106.73 IP-BLOCK 81.23.121.126 IP-BLOCK 81.23.121.126 IP-BLOCK 81.23.121.126 IP-BLOCK 81.23.121.126 IP-BLOCK 81.23.121.126 IP-BLOCK 117.198.207.153 IP-BLOCK 81.23.121.126 IP-BLOCK 81.23.121.126 IP-BLOCK 81.23.121.126 IP-BLOCK 117.198.133.54 IP-BLOCK 124.217.225.37 IP-BLOCK 117.200.58.143 IP-BLOCK 117.197.16.18 IP-BLOCK 218.10.62.179 IP-BLOCK 117.199.118.171Only potential program I can see malicious on this PC is Screenshot Captor which is a freeware advertised in the avast forum! Link to post Share on other sites More sharing options...
MysteryFCM Posted February 17, 2010 ID:201284 Share Posted February 17, 2010 Any chance you're running a P2P program? (every single IP you've listed is involved in malicious activity, so whilst I still suspect an infection, especially given the presence of 124.217.225.37 (Piradius IP), I thought I'd ask).If not, a packet capture would help track this down (you can use Wireshark for packet captures) Link to post Share on other sites More sharing options...
gdiloren Posted February 17, 2010 Author ID:201299 Share Posted February 17, 2010 Any chance you're running a P2P program? (every single IP you've listed is involved in malicious activity, so whilst I still suspect an infection, especially given the presence of 124.217.225.37 (Piradius IP), I thought I'd ask).If not, a packet capture would help track this down (you can use Wireshark for packet captures)Yes I'm logged on my Live Messenger permanently. I'll try to close it down. Also I have to tell Windows Security Center wasn't recognizing Comodo FW and Defense + as activated although they were. They were set too high and I put it back to normal. It solved the problem with Windows Security Center. Link to post Share on other sites More sharing options...
gdiloren Posted February 17, 2010 Author ID:201300 Share Posted February 17, 2010 Yes I'm logged on my Live Messenger permanently. I'll try to close it down. Also I have to tell Windows Security Center wasn't recognizing Comodo FW and Defense + as activated although they were. They were set too high and I put it back to normal. It solved the problem with Windows Security Center.No, it's not Live Messenger since I exited and I have the same Malaysian IPs. I don't use P2Ps for fear of infections. I'm going to investigate this! Link to post Share on other sites More sharing options...
gdiloren Posted February 22, 2010 Author ID:203870 Share Posted February 22, 2010 No, it's not Live Messenger since I exited and I have the same Malaysian IPs. I don't use P2Ps for fear of infections. I'm going to investigate this!Looks like to be Crawler Spyware Terminator MBAM in AVAST FORUM GENERAL Link to post Share on other sites More sharing options...
MysteryFCM Posted February 28, 2010 ID:207362 Share Posted February 28, 2010 Apologies for forgetting about this one. With ref to Spyware Terminator, please see;http://forums.malwarebytes.org/index.php?s...c=34748&hl= Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now