My computer has been hijacked by some sort of 'bot. This malware spoofs the computer's IP address as somewhere in the range of 169.254.39.xx to169.254.197.xx. It attempts to send something to 169.254..255.255. My research this afternoon tells me the 169.254.xx.xx range is reserved for local use, so I'm puzzled about where these packets are ending up.
Luckily for the rest of the world, our SonicWall router is preventing my computer from sending out anything with a spoofed address. Unfortunatelyfor me that means my computer cannot currently connect to the internet at all.
I've run scans with Panda, Malwarebytes, ZoneAlarm, and a few others on the infected machine. The scans have turned up minor items (adware, etc.) but not the big hit I'mexpeecting. Any advice will be greatly appreciated. Thanks. - Tony Lima
Edited by jgweed, 26 January 2009 - 02:57 PM.
move post to more appropriate forum.jgw