Welcome to SecurityForumz.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

List of the Virus makers's IP, there is one person in Bend..

 
   Security Forums (Home) -> General Discussions RSS
Next:  Ping: 4Q Source Code  
Author Message
Yup! BUSH trashed US$$

External


Since: Dec 28, 2007
Posts: 3



(Msg. 1) Posted: Fri Dec 28, 2007 3:22 am
Post subject: List of the Virus makers's IP, there is one person in Bend Oregon with multiple IPs, scanning people computer for information.
Archived from groups: alt>comp>virus (more info?)

IP's to block:

208.100.132.167
208.100.170.5
208.100.244.206
67.215.12.210




Or you can create your own block list from this registry, this is for IE
6.0, XP SP2

Windows Registry Editor Version 5.00
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P]
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History]
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\0.0.0.0]
@=dword:00000001
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\127.0.0.1]
@=dword:00000001
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\208.100.132.167]
@=dword:00000005
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\208.100.170.5]
@=dword:00000005
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\208.100.244.206]
@=dword:00000005
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\67.215.12.210]
@=dword:00000005
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\hotmail.com]
@=dword:00000001
[HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
Settings\P3P\History\msn.com]
@=dword:00000001


Noticed that there is 127.0.0.1 and 0.0.0.0, Do not block them because they
are yourself, you would want to be able to send email out through Outlook.

Merry Xmas and Happy New year....

 >> Stay informed about: List of the Virus makers's IP, there is one person in Bend.. 
Back to top
Login to vote
Yup! BUSH trashed US$$

External


Since: Dec 28, 2007
Posts: 3



(Msg. 2) Posted: Fri Dec 28, 2007 3:26 am
Post subject: Re: List of the Virus makers's IP, there is one person in Bend Oregon with multiple IPs, scanning people computer for information. [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

"Yup! BUSH trashed US$$" <Russianadam RemoveThis @hotmail.com> wrote in message
news:fl4td5$tjp$1@aioe.org...
> IP's to block:
>
> 208.100.132.167
> 208.100.170.5
> 208.100.244.206
> 67.215.12.210
>
>
>
>
> Or you can create your own block list from this registry, this is for IE
> 6.0, XP SP2
>
> Windows Registry Editor Version 5.00
> [HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings\P3P]
> [HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings\P3P\History]
> [HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings\P3P\History\0.0.0.0]
> @=dword:00000001
> [HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings\P3P\History\127.0.0.1]
> @=dword:00000001
> [HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings\P3P\History\208.100.132.167]
> @=dword:00000005
> [HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings\P3P\History\208.100.170.5]
> @=dword:00000005
> [HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings\P3P\History\208.100.244.206]
> @=dword:00000005
> [HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings\P3P\History\67.215.12.210]
> @=dword:00000005
> [HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings\P3P\History\hotmail.com]
> @=dword:00000001
> [HKEY_USERS\S-1-5-21-299502267-884357618-725345543-1021\Software\Microsoft\Windows\CurrentVersion\Internet
> Settings\P3P\History\msn.com]
> @=dword:00000001
>
>
> Noticed that there is 127.0.0.1 and 0.0.0.0, Do not block them because
> they
> are yourself, you would want to be able to send email out through Outlook.
>
> Merry Xmas and Happy New year....
>


My registry key may not work for your PC because your USER's registry keys
may not be the same number as mine, because they were generated randomly by
XP at Install, but it should give you an idea on how to tackle the Virus
maker. Set your security High, or close to high, and block every site you
do not know.



Problem that you would normally see is, SVCHOST.exe crashing, that's a sign
of Virus going through your IE backdoor.

YBTUS$$

 >> Stay informed about: List of the Virus makers's IP, there is one person in Bend.. 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
List of the Virus makers's IP, there is one Virus maker in.. - IP's to block: 208.100.132.167 208.100.170.5 208.100.244.206 67.215.12.210 Or you can create your own block list from this registry, this is for IE 6.0, XP SP2 Windows Registry Editor Version 5.00..

My PC continuously plays a person snoring thru the speakers - WTF is this? Just popped up today. Scanning system as I type this.

advanced virus list ?? - Hello Does somebody know any news/mail list about advanced debugging/analysing virus/worms ? P.

NEW VIRUS? Email List *Error* - We have a small Windows network at work. Two users have had strange dialog boxes pop up out of the blue. The dialog contained a list of email addresses in no particular order - one address after the other - with only a space in between. Some of the email...

A new mailing list - TH-research is a new mailing list for reverse engineering and trojan horses experts, designed for sharing new trojan horses binaries, sources and information - as they come out. Since we find the trojan horses days, weeks and even a month before any AV...
   Security Forums (Home) -> General Discussions All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]