vvwvv-SpyBot.com.cn

T

TBear

New member
Does anyone know anything about this location: vvwvv-SpyBot.com.cn?

Look carefully: that is __NOT__ a "www" suffix. Instead, it's two "v"s followed by a "w" followed by another 2 "v"s which is intended to make the user think it's a "www". Spacing it out, it would look like this: "v v w v v-"

I was checking my ZoneAlarm Pro logs file for any unusual activity and spotted that entry. I've been unable to determine what is responsible for the entry. The address appears to be the destination that some program is attempting to reach using whichever browser I have active at the time it tries to call home (?). The IP Addy is: 74.52.175.138:53, which, curiously enough, appears to be located at "The Planet" in Houston, Texas. Though the domain's DNS is located in China. I immediately added the domain name to ZAPro's "Blocked" Zone.

Google and Yahoo searches turn up nothing.

Spybot SD comes up clean as does a full Kaspersky scan. And ZAPro's Spyware scan also comes up with nothing.

Does anyone have any information about this? Any help would be appreciated.
 
spybotsandra said:
We have added it to our detections.
Click to expand...

Does that mean you'll be adding it to the domain list you append to the hosts file?

I tried adding it to my hosts file, but a few minutes after so doing found I could no longer get out. Odd. (As noted adding it to ZoneAlarm's "Blocked" zone does not cause a problem.) Removing it from "hosts" reestablished my internet connection. If you add it to your list, might that create a problem for users when SB appends the domain to the hosts file and the user already has whatever the thing is that appears to be trying to call home?

Again, I'm puzzled by this one.
 
You must log in or register to reply here.
Back
Top