Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Spyware Unauthorized Transmission


  • Please log in to reply
1 reply to this topic

#1 mcstorm

mcstorm

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:10:59 AM

Posted 11 January 2007 - 09:11 AM

Hello to all.
I have a browser (ie7 and opera) spyware issue that is caught by Trend Micro firewall but I cannot remove the incident from repeating using spybot, adaware or trend. Trend catches unauthorized access / transmission to the link below. A whois query shows it originates from Switzerland on PRQ INT servers.

Has anyone seen this or knows how to delete the periodic access?

Thank you

Trend firewall detection string:
http://88.80.5.21/check/checkin.php?cid=10...amp;v=9&m=0

A Whois 88.80.5.21 query result:

This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Note: the default output of the RIPE Whois server
% is changed. Your tools may need to be adjusted. See
% http://www.ripe.net/db/news/abuse-proposal-20050331.html
% for more details.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html
% Note: This output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '88.80.2.0 - 88.80.7.255'
inetnum: 88.80.2.0 - 88.80.7.255
netname: PRQ-NET-COLO
descr: prq Inet POP STH3
descr: Co-located customer servers
country: SE
admin-c: pIN7-RIPE
tech-c: pIN7-RIPE
status: ASSIGNED PA
mnt-by: MNT-PRQ
source: RIPE # Filtered
role: prq Inet NOC
address: prq Inet
Box 1206
SE 11479 Stockholm
Sweden
phone: +46 (0)8 50003150
remarks: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
remarks: !! Abuse reports should ONLY be sent to abuse@prq.se !!
remarks: !! Do NOT call unless it's very urgent !!
remarks: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
admin-c: PW1115-RIPE
admin-c: AC9661-RIPE
tech-c: PW1115-RIPE
tech-c: AC9661-RIPE
nic-hdl: pIN7-RIPE
mnt-by: MNT-PRQ
source: RIPE # Filtered
abuse-mailbox: abuse@prq.se
% Information related to '88.80.0.0/19AS33837'
route: 88.80.0.0/19
descr: prq Inet aggregated route
origin: AS33837
mnt-by: MNT-PRQ
source: RIPE # Filtered

BC AdBot (Login to Remove)

 


#2 TMacK

TMacK

  • Members
  • 4,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:B.C. Canada
  • Local time:09:59 AM

Posted 12 January 2007 - 12:31 PM

Hi mcstorm and Welcome to Bleeping Computer,

Is this Trend Micro Firewall that comes with PC-cillin Internet Security?

I'm not familiar with this firewall,so for now perhaps you could try clicking on the Help or the question mark on the firewall page. It will get to some kind of support,ie forum,phone number etc.
If this is what you are using,it isn't freeware,so there should be a good support system in place.

Maybe another member can contribute to this topic.
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.

aaaaaaaa a~Suzie Wagner




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users