“www quizyou dot com”

[jfsm2000]

Reason for this post is computer response time suddenly increases and is noticed in just about everything you do from the time you turn on the computer (booting up) to shutting it down. Just about every forum I visit you can find a post about a computer suddenly taking forever to do what used to happen in a blink of an eye. In most cases people are blame it on Microsoft Updates but I think it more to do with thing as described below.

Some time ago after my grandkids got off my computer and I got on I noticed that it was running real slow. After some investigating I identified that “WWW QUIZYOU DOT COM” was accessing the internet just about every time I opened any application. So after I ran Norton Antivirus & SpyBot S&D which didn’t find anything I put a block in Norton Internet Security to block access to the web for “WWW QUIZYOU DOT COM”. This stopped the access but did not restore my computer response time, it may have even made it worst. For months now I have searched everything on my computer and used just about every tool to identify what was initiating connection to “WWW QUIZYOU DOT COM” with no luck.

Searching the Internet to find out what I could about “WWW QUIZYOU DOT COM” I determined that my grandkids took one or more of these quizzes. Checking on just about all the antivirus and malware site including SpyBot S&D they either didn’t have any info or said that “WWW QUIZYOU DOT COM” is trusted as safe; I guess because it's determined that it doesn't cause any damage to your computer or invade your privacy or whatever else they use when classifying risk.

I am requesting that SpyBot S&D to be the first to classify this as unsafe and make prevision to block and remove if exist “WWW QUIZYOU DOT COM”. Below is a copy of NIS log file of a simple restart, login and open NIS to save the log file as a .txt. You it’s easy to see that “WWW QUIZYOU DOT COM” not only tries to access the Net but when it can’t it tries to piggyback on anything that is accessing the Net. In my book anything that tries this hard to access the Net without permission is malware.

The following log is in reverse order where boot start is at the bottom and desktop displayed is the first line below.

5/14/2009 8:10 Info An instance of \<path>C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe</path>\" is preparing to access the Internet."
5/14/2009 8:10 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:10 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:10 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:10 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:10 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:10 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:10 Info An instance of \<path>C:\Program Files\Windows Media Player\wmpnetwk.exe</path>\" is preparing to access the Internet."
5/14/2009 8:10 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication. Process name is \"C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe\"."
5/14/2009 8:10 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication. Process name is \"C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe\"."
5/14/2009 8:10 Info An instance of \<path>C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe</path>\" is preparing to access the Internet."
5/14/2009 8:10 Info User logged in.
5/14/2009 8:09 Info An instance of \<path>C:\Windows\ehome\ehRecvr.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info Connected to a protected network. (127.0.0.0/255.0.0.0)
5/14/2009 8:07 Info Connected to a shared network. (00 18 39 BD EC 58)
5/14/2009 8:07 Info Protecting your connection to a newly detected network on adapter \NVIDIA nForce 10/100/1000 Mbps Ethernet \" (IP address: 192.168.1.104)."
5/14/2009 8:07 Info Protecting your connection to a newly detected network on adapter \NVIDIA nForce 10/100/1000 Mbps Ethernet \" (IP address: fe80::9880:d37e:c781:ecd)."
5/14/2009 8:07 Info An instance of \<path>C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info An instance of \<path>C:\Windows\System32\services.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication. Process name is \"C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe\"."
5/14/2009 8:07 Info An instance of \<path>C:\Program Files\Norton Internet Security\Norton Internet Security\Engine\16.5.0.134\ccSvcHst.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info An instance of \<path>C:\Windows\System32\spoolsv.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication. Process name is \"C:\Program Files\Norton Internet Security\Norton Internet Security\AddOns\Norton AddOn Pack\Engine\3.1.0.7\ccProxy.exe\"."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication. Process name is \"C:\Program Files\Norton Internet Security\Norton Internet Security\AddOns\Norton AddOn Pack\Engine\3.1.0.7\ccProxy.exe\"."
5/14/2009 8:07 Info An instance of \<path>C:\Program Files\Norton Internet Security\Norton Internet Security\AddOns\Norton AddOn Pack\Engine\3.1.0.7\ccProxy.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info An instance of \<path>C:\Windows\System32\lsass.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info An instance of \<path>C:\Windows\System32\svchost.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info An instance of \<path>C:\Windows\System32\svchost.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication. Process name is \"C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe\"."
5/14/2009 8:07 Info An instance of \<path>C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info An instance of \<path>C:\Windows\System32\svchost.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication. Process name is \"System\"."
5/14/2009 8:07 Info An instance of \<path>C:\Windows\System32\svchost.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info An instance of \<path>C:\Windows\System32\svchost.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info An instance of \<path>C:\Windows\System32\svchost.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info An instance of \<path>C:\Windows\System32\wininit.exe</path>\" is preparing to access the Internet."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info Rule \Block in and out bound communication with www.quizyou.net\" blocked communication."
5/14/2009 8:07 Info Intrusion Prevention has been enabled
5/14/2009 8:07 Info Intrusion Prevention Engine version: 4.1.0.61 Definitions Set version: 20090508.002
5/14/2009 8:07 Info Intrusion Prevention is monitoring 1351 signatures. Driver version: 9.0.3.10
5/14/2009 8:06 Info No user is logged in.
5/14/2009 8:06 Medium Unauthorized access logged (Access Thread Data)

[jfsm2000]

Sorry the site is WWW DOT QUIZYOU DOT NET not DOT COM and the description for this post should also have DOT NET.