BleepingComputer.com: eset blocking random website that im not trying to connect to

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.


If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

eset blocking random website that im not trying to connect to

#1 User is offline   cybalokz 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 1
  • Joined: 01-June 11

Posted 04 June 2011 - 02:07 PM

Hi all

I need some help here.
Eset keeps blocking a website / file .

Eset has blocked
url address: gsn.com/video/bclm.exe

IP Adress: 124.217.235.76:80



eset is doing its job by blocking it but i can not find whats causing it.
when i look at process (in task manager )over 7000 items, there are hundreds if not 1000's of instances of BCLM *32 in running i have not a clue what it is.

any help tips would be much appreciated. if you need more info just tell me what you need

thanks

This post has been edited by cybalokz: 04 June 2011 - 02:13 PM


#2 User is offline   AlexAngus 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 2
  • Joined: 04-June 11

Posted 04 June 2011 - 04:50 PM

Hi,

I have exactly the same problem that has just started happening did you visit the gsn.com website before this started happening, Ive just finished a clean install of windows 7 too.

My Bitdefender persistantly notifies me that it has blocked this particular execution, not only that but i found that a new rule had been created in bit defenders firewall to allow this program it resides in C:/windows/bclm.exe so i removed this rule straight away, although it still notifies me that it has been terminated. I have now blocked access to www.gsn.com .

Anyhelp would be appreciated,

Thanks

#3 User is offline   cachudo 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 1
  • Joined: 13-July 11

Posted 13 July 2011 - 05:02 AM

I too was having sort of the same problem where something was trying to connect to gsn.com/games/gs32.exe and eset would block it. I was able to find the problem in the task scheduler. By using eset's sysinspector i found 5 entries in task scheduler that were unknown. Each would run at different times, running 5 different .exe files that were hidden in c:\windows folder. Also the hosts file had been changed. So I recreated the hosts file. Deleted the 5 tasks and deleted the five .exe files and no longer have this problem. This seems to be a new malware problem, being even malwarebytes wasn't able to find this. Not sure if this applies to you both but sort of sounds the same being both of you are getting random connections to gsn.com.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users