Hi,
I keep getting a warning from my network shield saying that is blocking something from either getting into my computer or getting out. I am not very computer savvy so I was hoping someone could tell me what these attacks are. I have pasted the log below. I hope someone has an idea about what these are. Thanks for your help.
23.08.2009 19:10:09 Network Shield: blocked access to malicious site 88.80.7.152/cgi/mmmmmmc.php?cc=215=060x644544x<x4x4x7<x [ C:\Program Files\Internet Explorer\iexplore.exe ( 1608 ) ]
23.08.2009 19:18:50 Network Shield: blocked access to malicious site 88.80.7.152/cgi/cccc.php?cccc=215=060x644544x<x4x4x7<x [ C:\Program Files\Internet Explorer\iexplore.exe ( 2644 ) ]
23.08.2009 19:21:13 Network Shield: blocked access to malicious site 88.80.7.152/cgi/bbbb.php?bbb=215=060x644544x<x4x4x7<x [ C:\Program Files\Internet Explorer\iexplore.exe ( 3184 ) ]
23.08.2009 19:28:53 Network Shield: blocked access to malicious site 88.80.7.152/cgi/qgvvl.php?qgl=4x4x<x4x4x7<x [ C:\Program Files\Outlook Express\msimn.exe ( 4048 ) ]
23.08.2009 19:38:53 Network Shield: blocked access to malicious site 88.80.7.152/cgi/aaaqqqgg.php?vvll=215=060x644544x<x4x4x7<x [ C:\Program Files\Internet Explorer\iexplore.exe ( 1448 ) ]
23.08.2009 19:42:39 Network Shield: blocked access to malicious site 88.80.7.152/cgi/ohhhhhhh.php?hhhhh=215=060x644544x<x4x4x7<x [ C:\Program Files\Internet Explorer\iexplore.exe ( 2940 ) ]
23.08.2009 19:43:22 Network Shield: blocked access to malicious site 88.80.7.152/cgi/vvv.php?vvl=215=060x644544x<x4x4x7<x [ C:\Program Files\Internet Explorer\iexplore.exe ( 3300 ) ]
23.08.2009 19:44:14 Network Shield: blocked access to malicious site 88.80.7.152/cgi/mw.php?wlll=4x4x<x4x4x7<x [ C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe ( 1228 ) ]
24.08.2009 07:13:00 Network Shield: blocked access to malicious site 88.80.7.152/cgi/yy.php?ooee=215=060x644544x<x4x4x7<x [ C:\Program Files\Internet Explorer\iexplore.exe ( 2516 ) ]
24.08.2009 07:29:57 Network Shield: blocked access to malicious site 88.80.7.152/cgi/nww.php?wmmm=4x4x<x4x4x7<x [ C:\Program Files\Outlook Express\msimn.exe ( 3820 ) ]
hxxp://88.80.7.152/
is a malicious site and spread malware.
Can you clean your temporary files?
You can use CleanUp or CCleaner for that.
Start your browser again after that.
What type of malware does it spread? It just had one word on it… “hi”
Im pretty sure its super nasty!^^
-AnimeLover^^
You mean the IP Tech was referring to? You actually went there? :o
The link was broken for a reason…:
Yea… I actually went there… No prob caused to my pc… though I use linux… later did a full system scan with avast… found a malware in the FF cache…
Here’s the log…
2009-08-24 17:53:51 Found virus ‘Win32:Spyware-E [Trj]’ in file ‘/home/ryan/.mozilla/firefox/uj724ajm.default/Cache/CACHE_003’.
The link was broken for a reason? I’m not sure what that means.
It means it isn’t active (clickable) to avoid accidental exposure to malware.
e.g. changing the URL from http to hXXp or www to wXw, to break the link as Tech did when he replied.
Thanks for the info, I am trying to learn as much as possible about this stuff and how to remove it.
No problem, welcome to the forums.