| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 56524 | 2005-04-07 14:10:00 | Fresh install, weird active internet connection | sal (67) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 342583 | 2005-04-09 02:41:00 | I wish they wouldn't do everyday housekeeping (whatever that is) if thats the case. Anyway, in a last ditch effort, I done some packet sniffing, but am still unsure what to gather from this, I promise this is the last screenshot from me: sal.neoburn.net I notice bridge in there but thats about it. Can anyone enlighten me now? |
sal (67) | ||
| 342584 | 2005-04-13 07:40:00 | I just netstat -a'd our computer and found some interesting entries (sal.neoburn.net/imagef1/files/netstat_new.gif). Kind of sucks how the usual spyware/adware applications cant help with some of these. | sal (67) | ||
| 342585 | 2005-04-13 07:52:00 | Run HijackThis. That should be able to locate absoluagency on your system. Have you tried search for this item as well, especially in your hosts file? It appears to be a trojan from a google search. Information on the trojan Trojan.StartPage.H (securityresponse.symantec.com). If you look down that page, you will see absoluagency mentioned as adding entries to IE favourites as well. |
Jen (38) | ||
| 342586 | 2005-04-13 09:06:00 | Run HijackThis. That should be able to locate absoluagency on your system. Have you tried search for this item as well, especially in your hosts file? It appears to be a trojan from a google search. Information on the trojan Trojan.StartPage.H (securityresponse.symantec.com). If you look down that page, you will see absoluagency mentioned as adding entries to IE favourites as well. Hi Jen, Ran HJT, got given a clean bill of health (sal.neoburn.net) (although of course I dont actually). The absoluagency.com url is in my hosts file but as a blocked item (0.0.0.0 absoluagency.com) because I use a one of these (www.mvps.org) hosts files. I will keep chipping away at this though. |
sal (67) | ||
| 342587 | 2005-04-14 02:16:00 | Where would I find these rogue connections (sal.neoburn.net) starting from and how would I stop them from listening? | sal (67) | ||
| 1 2 3 | |||||