Welcome to SecurityForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

List of the Virus makers's IP, there is one Virus maker in..

 
   Security Forums (Home) -> General Discussions RSS
Next:  Nod32 evaluation  
Author Message
Yup! BUSH trashed US$$

External


Since: Dec 28, 2007
Posts: 3



(Msg. 1) Posted: Fri Dec 28, 2007 3:36 am
Post subject: List of the Virus makers's IP, there is one Virus maker in Bend Oregon with multiple IPs, scanning people computers for information.
Archived from groups: alt>comp>anti-virus (more info?)

IP's to block:

208.100.132.167
208.100.170.5
208.100.244.206
67.215.12.210




Or you can create your own block list from this registry, this is for IE
6.0, XP SP2

Windows Registry Editor Version 5.00
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P]
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History]
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\0.0.0.0]
@=dword:00000001
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\127.0.0.1]
@=dword:00000001
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\208.100.132.167]
@=dword:00000005
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\208.100.170.5]
@=dword:00000005
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\208.100.244.206]
@=dword:00000005
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\67.215.12.210]
@=dword:00000005
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\hotmail.com]
@=dword:00000001
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\msn.com]
@=dword:00000001


My registry key may not work for your PC because your User's registry keys
may not be the same number as mine, because Windows OS generated them
randomly
at Install, but it should give you an idea on how to tackle the Virus maker
from scanning your PC. Set your security High, or close to high, and Do not
allow every site you visit to have access to your PC, with except with site
you know like CNN, MSN, etc..

Problem you would normally see is: SVCHOST.exe crashing, that's a sign
of Virus going through your IE backdoor, this is part of IE exploit Virus.

Noticed that I allowed IP 127.0.0.1 and 0.0.0.0, Do not block them because
they
are yourself, you would want to be able to send email out through Outlook.

Merry Xmas and Happy New year....


YBTUS$$

 >> Stay informed about: List of the Virus makers's IP, there is one Virus maker in.. 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
List of the Virus makers's IP, there is one person in Bend.. - IP's to block: 208.100.132.167 208.100.170.5 208.100.244.206 67.215.12.210 Or you can create your own block list from this registry, this is for IE 6.0, XP SP2 Windows Registry Editor Version 5.00..

advanced virus list ?? - Hello Does somebody know any news/mail list about advanced debugging/analysing virus/worms ? P.

NEW VIRUS? Email List *Error* - We have a small Windows network at work. Two users have had strange dialog boxes pop up out of the blue. The dialog contained a list of email addresses in no particular order - one address after the other - with only a space in between. Some of the email...

A new mailing list - TH-research is a new mailing list for reverse engineering and trojan horses experts, designed for sharing new trojan horses binaries, sources and information - as they come out. Since we find the trojan horses days, weeks and even a month before any AV...

blacklisted list? - I'm getting a lot of email bounced back to me from various companies, sites, etc, saying that my address contained a virus...yet I never sent this mail in the first place. I presume this is a common thing, to have one's identity used be someone else.....
   Security Forums (Home) -> General Discussions All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]