Possible Malware/Philshing sites

Printable View

2010-11-23, 23:30
Soulflare3

Possible Malware/Philshing sites

I have a some IP addresses and domains in question. Trying to fix a computer. It is a desktop that I am running the internet connection through a laptop so I can monitor traffic. Using Colasoft Capsa 7 Free to get domains and addresses. Here's some of what I am unsure about:

http://freegiveawayoffers.com/weeklywinner/ (This opens every time the browser is started (not homepage - opens in new window)... Has some "free $1000 Walmart Giftcard")
http://z0g7yail0.com
http://cijkcplxelabn.com
http://advcpworld.com
194.60.205.222
194.60.205.223
94.228.209.213
48.187.53.52
184.154.110.32
212.117.177.13
94.228.209.213

Note: some IP addresses correspond to the domains listed above

I am not sure of any other way to block them... Please help! (There may be more... I am not entirely sure yet - Still reviewing logs. Already removed over 7 viruses/trojans)
2010-11-24, 07:00
TQT08

Quote:

Originally Posted by Soulflare3

I have a some IP addresses and domains in question. Trying to fix a computer. It is a desktop that I am running the internet connection through a laptop so I can monitor traffic. Using Colasoft Capsa 7 Free to get domains and addresses. Here's some of what I am unsure about:

http://freegiveawayoffers.com/weeklywinner/ (This opens every time the browser is started (not homepage - opens in new window)... Has some "free $1000 Walmart Giftcard")
http://z0g7yail0.com
http://cijkcplxelabn.com
http://advcpworld.com
194.60.205.222
194.60.205.223
94.228.209.213
48.187.53.52
184.154.110.32
212.117.177.13
94.228.209.213

Note: some IP addresses correspond to the domains listed above

I am not sure of any other way to block them... Please help! (There may be more... I am not entirely sure yet - Still reviewing logs. Already removed over 7 viruses/trojans)

I'm getting this pop up too.

Can anyone help?
2011-02-20, 08:30
Soulflare3

wow

I got this virus removed (Trend Micro Titanium Internet Security was the only thing that could stop it), but the walmart popup never went away. It has been almost 3 months now, and no solution.

FYI, this virus was a worm that copied itself 300+ times into system folders (ex. c:\windows\system32)...

It would be nice to be able to add custom urls and ip addresses to the block lists... just saying.