Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Something strange in my passwords


  • Please log in to reply
15 replies to this topic

#1 bellagirl

bellagirl

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:08:54 AM

Posted 01 February 2015 - 07:26 PM

Today i wanted uninstall/reinstall google chrome as lately i have been getting a popup that says high memory usage.

 

I wanted to make a list of my sites i visit and passwords to enter.

 

I can account for all except for 1.  I have never seen this site or entered a password for it.  

 

Its called bemis.partners.extranet microsoft.

 

when i googled this it comes up with a server name that has derogatory comments about what they think of microsoft.

 

can anyone shed light on what this may be ???

 

Thanks in advance.



BC AdBot (Login to Remove)

 


#2 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,697 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:54 PM

Posted 01 February 2015 - 09:34 PM

Hi bella :)

My guess is that this is some website owned by Microsoft and to which you are being redirected to when you login or access a certain webpage on their website while being logged in. I just checked and this is a legitimate Microsoft website, looks like it's being used by Windows when you use a server or something, I'll dig more into it. Also, which program gives you a pop-up mentionning the high memory usage?

animinionsmalltext.gif
unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#3 bellagirl

bellagirl
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:08:54 AM

Posted 01 February 2015 - 10:57 PM

Google Chrome was the site that kept saying i have the high memory usage.  I will send you a private message now regarding the other.



#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,092 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:54 PM

Posted 02 February 2015 - 05:40 AM

By Bleeping Computer policy, members are not permitted to provide help via PM or email as it defeats the purpose of forums. Further, it prevents the staff from monitoring the information provided which in turn prohibits our ability to ensure the instructions are trustworthy, safe and appropriate. Exchanging information this way places our members at risk if something goes awry.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,697 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:54 PM

Posted 02 February 2015 - 06:25 AM

What quietman said. In order to respect that policy, I'll post the PM here, since it doesn't contain any kind of personal information.

this is some more information about the bemis.partners that i found:
Server Name: MICROSOFT.COM.ARE.GODDAMN.PIGbleeperS.NET.NS-NOT-IN-SERVICE.COM
IP Address: 216.127.80.46
Registrar: TUCOWS DOMAINS INC.
Whois Server: whois.tucows.com
Referral URL: http://www.tucowsdomains.com

Server Name: MICROSOFT.COM.BTFO.BY.GAHNOO.LINUCKS.BILL.GATES.PLS.GO.CHARLTONTREZEVANT.COM
IP Address: 96.59.119.200
Registrar: GOOGLE INC.
Whois Server: whois.rrpproxy.net

I dont understand what it means.

Thanks
Bella

From what I see, this is a bad IP look-up on the domain, more of a joke if you ask me. The real one is here:

http://bemis.partners.extranet.microsoft.com.ipaddress.com/

And there's nothing to worry about. Do you have a server at home, or is this computer used in a corporate/business environment?

animinionsmalltext.gif
unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#6 bellagirl

bellagirl
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:08:54 AM

Posted 02 February 2015 - 06:28 AM

no worries..I thought with the swearing it would be wrong to put it in the public domain.  here is what i sent.

 

Server Name: MICROSOFT.COM.ARE.GODDAMN.PIGbleeperS.NET.NS-NOT-IN-SERVICE.COM 

   Registrar: TUCOWS DOMAINS INC.

   Whois Server: whois.tucows.com

   Referral URL: http://www.tucowsdomains.com

   Server Name: MICROSOFT.COM.BTFO.BY.GAHNOO.LINUCKS.BILL.GATES.PLS.GO.CHARLTONTREZEVANT.COM

   IP Address:

   Registrar: GOOGLE INC.

   Whois Server: whois.rrpproxy.net



#7 bellagirl

bellagirl
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:08:54 AM

Posted 02 February 2015 - 06:29 AM

no i dont have a server...i am just a mum using a laptop...lol



#8 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,697 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:54 PM

Posted 02 February 2015 - 06:30 AM

Can you give us the address of the website that returned you that information? Like I said, this looks like a plain joke and the results are just false. I would like to know what kind of website returns these kind of records for a website.

animinionsmalltext.gif
unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#9 bellagirl

bellagirl
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:08:54 AM

Posted 02 February 2015 - 06:30 AM

By Bleeping Computer policy, members are not permitted to provide help via PM or email as it defeats the purpose of forums. Further, it prevents the staff from monitoring the information provided which in turn prohibits our ability to ensure the instructions are trustworthy, safe and appropriate. Exchanging information this way places our members at risk if something goes awry.

 

Sorry...i thought the language was inappropriate for this site to be on a public forum.  

 

 

i see that it was automatically "bleeped".


Edited by bellagirl, 02 February 2015 - 06:32 AM.


#10 bellagirl

bellagirl
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:08:54 AM

Posted 02 February 2015 - 06:33 AM

i will see if i can find the site.  



#11 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,697 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:54 PM

Posted 02 February 2015 - 06:35 AM

Does anyone else uses your laptop? Was that laptop ever brought outside of the house? Did you buy it new or refurbished?

animinionsmalltext.gif
unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#12 bellagirl

bellagirl
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:08:54 AM

Posted 02 February 2015 - 06:38 AM

No it was purchased brand new about 4 years ago.  its never been connected to the internet outside the house.


Edited by bellagirl, 02 February 2015 - 06:39 AM.


#13 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,697 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:04:54 PM

Posted 02 February 2015 - 06:42 AM

At your job, do you use Google Chrome with your Google account connected on it? Or anywhere else other than on this laptop?

animinionsmalltext.gif
unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#14 bellagirl

bellagirl
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:08:54 AM

Posted 02 February 2015 - 06:46 AM

no....never.



#15 bellagirl

bellagirl
  • Topic Starter

  • Members
  • 48 posts
  • OFFLINE
  •  
  • Local time:08:54 AM

Posted 02 February 2015 - 06:48 AM

I got that result when i googled the name.  so maybe it was just a bad look up.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users