Datahjelperne

Pc infisert av Botnett

Jørund Heimholt

 

Har fått tilsendt en sak her fra Liv Dineen som sier at pc-en har blitt tatt over av fremmede. Hun har kontaktet Microsoft i denne saken og pc produsenten HP, men har fått meget lite hjelp i saken sin. De har ikke klart å løse saken til nå.

 

Hun har gitt tillatelse til at jeg kan bruke navnet hennes i denne saken.

 
Jeg forsøker å fremme saken hennes på bloggen min for å se om det er noen som kan bistå henne.
Jeg har ikke all kunnskap til å løse saken, men jeg skal legge fram så mye nytting informasjon jeg kan.

 

Det startet med at hun ikke fikk oppdatert PC-en sin med denne feilmeldingen:
SRX1205894606ID – NO Win8 – Windows Update can not update properly, error: 0x80070490

 

 

 
Pc`en er også levert med noen filer som ser ut til å være fra Norton Antivirus/Security, men det er ikke tilfelle sier hun. Da de har gitt henne mye problemer. 
 
http://systemexplorer.net/file-database/file/norton-m-esd-3-2-0-19-smui-exe
 
Den kan være forkledd for alt jeg vet. Selv denne typen filer kommer i mange varianter.
 

Det har også vært mange tilfeller med pc`er med bootnettverk infisert og levert fra produsent:

http://www.pcworld.com/article/262308/microsoft_finds_new_computers_in_china_preinstalled_with_malware.html
http://blogs.technet.com/b/microsoft_blog/archive/2012/09/13/microsoft-disrupts-the-emerging-nitol-botnet-being-spread-through-an-unsecure-supply-chain.aspx
 

Maskinen hennes får også feil dns da med denne feilmeldingen:
The name of this machine either does not resolve or resolves to a
different IP address.

This may come from a badly configured reverse DNS or from a host file
in use on the Nessus scanning host.

As a result, URLs in plugin output may not be directly usable in a web
browser and some web tests may be incomplete.

På norsk vil det si at maskinen får feil ip adresse og den blir dirigert til en annen server på internet.

Hostfilen på maskinen ledes også til veldig mange adresser:
122.107# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a ‘#’ symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host

# localhost name resolution is handled within DNS itself.
# 127.0.0.1       localhost
# ::1             localhost
# Start of entries inserted by Spybot – Search & Destroy
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 www.10sek.com
127.0.0.1 10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 www.123fporn.info
127.0.0.1 123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1 www.123moviedownload.com
127.0.0.1 www.123simsen.com
127.0.0.1 123simsen.com
127.0.0.1 www.123topsearch.com
127.0.0.1 123topsearch.com
127.0.0.1 125sms.co.uk
127.0.0.1 www.125sms.co.uk
127.0.0.1 125sms.com
127.0.0.1 www.125sms.com
127.0.0.1 132.com
127.0.0.1 www.132.com
127.0.0.1 www.1337crew.info
127.0.0.1 1337crew.info
127.0.0.1 www.1337-crew.to
127.0.0.1 1337-crew.to
127.0.0.1 136136.net
127.0.0.1 www.136136.net
127.0.0.1 150freesms.de
127.0.0.1 www.150freesms.de
127.0.0.1 163ns.com
127.0.0.1 www.163ns.com
127.0.0.1 171203.com
127.0.0.1 17concepts.info
127.0.0.1 www.17concepts.info
127.0.0.1 17-plus.com
127.0.0.1 www.1800searchonline.com
127.0.0.1 1800searchonline.com
127.0.0.1 www.180searchassistant.com
127.0.0.1 180searchassistant.com
127.0.0.1 180solutions.com
127.0.0.1 www.180solutions.com
127.0.0.1 181.365soft.info
127.0.0.1 www.181.365soft.info
127.0.0.1 1987324.com
127.0.0.1 www.1987324.com
127.0.0.1 www.1-domains-registrations.com
127.0.0.1 1-domains-registrations.com
127.0.0.1 www.1ghporn.info
127.0.0.1 1ghporn.info
127.0.0.1 www.1importantiamreal.com
127.0.0.1 1importantiamreal.com
127.0.0.1 www.1mybigdreamnowreal.com
127.0.0.1 1mybigdreamnowreal.com
127.0.0.1 www.1sexparty.com
127.0.0.1 1sexparty.com
127.0.0.1 www.1sms.de
127.0.0.1 1sms.de
127.0.0.1 www.1spybot.com
127.0.0.1 1spybot.com
127.0.0.1 www.1stantivirus.com
127.0.0.1 1stantivirus.com
127.0.0.1 www.1stpagehere.com
127.0.0.1 1stpagehere.com
127.0.0.1 www.1stsearchportal.com
127.0.0.1 1stsearchportal.com
127.0.0.1 2.82211.net
127.0.0.1 2006ooo.com
127.0.0.1 www.2006ooo.com
127.0.0.1 www.2007-download.com
127.0.0.1 2007-download.com
127.0.0.1 www.2008firefox.com
127.0.0.1 2008firefox.com
127.0.0.1 2008search-destroy.com
127.0.0.1 www.2008search-destroy.com
127.0.0.1 2008-search-destroy.com
127.0.0.1 www.2008-search-destroy.com
127.0.0.1 www.2008-viewer.com
127.0.0.1 2008-viewer.com
127.0.0.1 2009–access.com
127.0.0.1 www.2009–access.com
127.0.0.1 www.2009antivirpro.com
127.0.0.1 2009antivirpro.com
127.0.0.1 www.2009-edition.com
127.0.0.1 2009-edition.com
127.0.0.1 www.2009-phone.com
127.0.0.1 2009-phone.com
127.0.0.1 www.2009search-destroy.com
127.0.0.1 2009search-destroy.com
127.0.0.1 www.2009-version.info
127.0.0.1 2009-version.info
127.0.0.1 www.2011-kilos-verlieren.eu
127.0.0.1 2011-kilos-verlieren.eu
127.0.0.1 www.2020search.com
127.0.0.1 2020search.com
127.0.0.1 20x2p.com
127.0.0.1 21dice.net
127.0.0.1 www.21dice.net
127.0.0.1 www.2-2005-search.com
127.0.0.1 2-2005-search.com
127.0.0.1 www.24.365soft.info
127.0.0.1 24.365soft.info
127.0.0.1 www.247fxxx.info
127.0.0.1 247fxxx.info
127.0.0.1 www.24-7pharmacy.info
127.0.0.1 24-7pharmacy.info
127.0.0.1 www.24-7searching-and-more.com
127.0.0.1 24-7searching-and-more.com
127.0.0.1 www.24teen.com
127.0.0.1 24teen.com
127.0.0.1 2777f1.makemegood24.com
127.0.0.1 28f049.perfectchoice1.com
127.0.0.1 2ae207.ddr-cash.net
127.0.0.1 2fcffd.perfectchoice1.com
127.0.0.1 2hj5jtnrlax.baptogbyog.com
127.0.0.1 2ndpower.com
127.0.0.1 www.2rfsex.info
127.0.0.1 2rfsex.info
127.0.0.1 www.2search.com
127.0.0.1 2search.com
127.0.0.1 www.2search.org
127.0.0.1 2search.org
127.0.0.1 www.2squared.com
127.0.0.1 2squared.com
127.0.0.1 www.2vgporn.info
127.0.0.1 2vgporn.info
127.0.0.1 2vt27zn0.firoli-sys.com
127.0.0.1 2zgfd0.hoststorageforyou.com
127.0.0.1 30horasdesexoonline.com
127.0.0.1 www.30horasdesexoonline.com
127.0.0.1 31columns.com
127.0.0.1 www.31columns.com
127.0.0.1 www.3-2005-search.com
127.0.0.1 3-2005-search.com
127.0.0.1 www.321-gratis-sms.com
127.0.0.1 321-gratis-sms.com
127.0.0.1 www.3322.org
127.0.0.1 3322.org
127.0.0.1 www.365fporn.info
127.0.0.1 365fporn.info
127.0.0.1 www.365sites.info
127.0.0.1 365sites.info
127.0.0.1 365soft.info
127.0.0.1 36obv2gzq5k.siercevay.com
127.0.0.1 www.36site.com
127.0.0.1 36site.com
127.0.0.1 3721.com
127.0.0.1 39-93.com
127.0.0.1 www.3bay.it
127.0.0.1 3bay.it
127.0.0.1 www.3dgsex.info
127.0.0.1 3dgsex.info
127.0.0.1 www.3mates.com
127.0.0.1 3mates.com
127.0.0.1 3o7dbisqfd4.nedqunefr.com
127.0.0.1 www.3wgporn.info
127.0.0.1 3wgporn.info
127.0.0.1 www.3xclipsonline.com
127.0.0.1 3xclipsonline.com
127.0.0.1 www.3xcurves.com
127.0.0.1 3xcurves.com
127.0.0.1 www.3xfestival.com
127.0.0.1 3xfestival.com
127.0.0.1 3x-festival.com
127.0.0.1 www.3x-festival.com
127.0.0.1 3x-galls.com
127.0.0.1 www.3x-galls.com
127.0.0.1 www.3xmiracle.com
127.0.0.1 3xmiracle.com
127.0.0.1 www.3xmoviesblog.com
127.0.0.1 3xmoviesblog.com
127.0.0.1 www.404dns.com
127.0.0.1 404dns.com
127.0.0.1 www.4115.duxipefer.com
127.0.0.1 4115.duxipefer.com
127.0.0.1 4199.com
127.0.0.1 www.4199.com
127.0.0.1 4-2005-search.com
127.0.0.1 www.4-2005-search.com
127.0.0.1 4corn.net
127.0.0.1 www.4corn.net
127.0.0.1 www.4ebay.it
127.0.0.1 4ebay.it
127.0.0.1 4klm.com
127.0.0.1 4mpg.com
127.0.0.1 www.4mpg.com
127.0.0.1 www.4-open-davinci.com
127.0.0.1 4-open-davinci.com
127.0.0.1 www.4thsex.info
127.0.0.1 4thsex.info
127.0.0.1 500sex.info
127.0.0.1 www.500sex.info
127.0.0.1 5-2005-search.com
127.0.0.1 www.5-2005-search.com
127.0.0.1 555royalclub.net
127.0.0.1 www.555royalclub.net
127.0.0.1 www.59cn.cn
127.0.0.1 59cn.cn
127.0.0.1 www.5okporn.info
127.0.0.1 5okporn.info
127.0.0.1 www.5starsblog.com
127.0.0.1 5starsblog.com
127.0.0.1 www.5zgmu7o20kt5d8yq.com
127.0.0.1 5zgmu7o20kt5d8yq.com
127.0.0.1 www.6000vornamen.de
127.0.0.1 6000vornamen.de
127.0.0.1 www.6700.cn
127.0.0.1 6700.cn
127.0.0.1 www.680180.net
127.0.0.1 680180.net
127.0.0.1 www.69loadz.com
127.0.0.1 69loadz.com
127.0.0.1 www.6hporn.info
127.0.0.1 6hporn.info
127.0.0.1 6o64cfcmkyt.tabletprescriptionshop.net
127.0.0.1 www.6plosex.info
127.0.0.1 6plosex.info
127.0.0.1 www.6sek.com
127.0.0.1 6sek.com
127.0.0.1 www.70-music.com
127.0.0.1 70-music.com
127.0.0.1 7172224.hostedresource.com
127.0.0.1 www.7322.com
127.0.0.1 7322.com
127.0.0.1 www.745970.com
127.0.0.1 745970.com
127.0.0.1 75tz.com
127.0.0.1 www.777bestcasino7.ru
127.0.0.1 777bestcasino7.ru
127.0.0.1 www.777casinoroyal.net
127.0.0.1 777casinoroyal.net
127.0.0.1 www.777casinozbest.net
127.0.0.1 777casinozbest.net
127.0.0.1 www.777gamecard.net
127.0.0.1 777gamecard.net
127.0.0.1 www.777jackpotgame.net
127.0.0.1 777jackpotgame.net
127.0.0.1 www.777luxcasino.net
127.0.0.1 777luxcasino.net
127.0.0.1 www.777playeuro.net
127.0.0.1 777playeuro.net
127.0.0.1 www.777search.com
127.0.0.1 777search.com
127.0.0.1 www.777starsgame.net
127.0.0.1 777starsgame.net
127.0.0.1 www.777top.com
127.0.0.1 777top.com
127.0.0.1 www.777web-casinoz.net
127.0.0.1 777web-casinoz.net
127.0.0.1 www.777webgamez.ru
127.0.0.1 777webgamez.ru
127.0.0.1 www.77zip.com
127.0.0.1 77zip.com
127.0.0.1 www.7939.com
127.0.0.1 7939.com
127.0.0.1 www.7dailynews.net
127.0.0.1 7dailynews.net
127.0.0.1 www.7jksex.info
127.0.0.1 7jksex.info
127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com
127.0.0.1 80-music.com
127.0.0.1 www.80-music.com
127.0.0.1 82211.net
127.0.0.1 85ni5bnb60.firoli-sys.com
127.0.0.1 8866.org
127.0.0.1 888best-games.net
127.0.0.1 www.888best-games.net
127.0.0.1 www.888gamegold.net
127.0.0.1 888gamegold.net
127.0.0.1 888gamevip.net
127.0.0.1 www.888gamevip.net
127.0.0.1 888globalplay.net
127.0.0.1 www.888globalplay.net
127.0.0.1 www.888-lucky.net
127.0.0.1 888-lucky.net
127.0.0.1 www.88sms.ch
127.0.0.1 88sms.ch
127.0.0.1 www.88vcd.com
127.0.0.1 88vcd.com
127.0.0.1 8ad.com
127.0.0.1 www.8ad.com
127.0.0.1 www.8-download.com
127.0.0.1 8-download.com
127.0.0.1 www.90-music.com
127.0.0.1 90-music.com
127.0.0.1 www.9505.com
127.0.0.1 9505.com
127.0.0.1 www.971searchbox.com
127.0.0.1 971searchbox.com
127.0.0.1 www.99downloads.de
127.0.0.1 99downloads.de
127.0.0.1 9mmporn.com
127.0.0.1 a.bestmanage.org
127.0.0.1 aaa.losnigerad.com
127.0.0.1 aaabesthomepage.com
127.0.0.1 www.aaabesthomepage.com
127.0.0.1 aaasexypics.com
127.0.0.1 aaawebfinder.com
127.0.0.1 www.aaawebfinder.com
127.0.0.1 aantivir.de
127.0.0.1 www.aantivir.de
127.0.0.1 www.aaqadarsztriv.com
127.0.0.1 aaqadarsztriv.com
127.0.0.1 www.aaqada-rsztriv.com
127.0.0.1 aaqada-rsztriv.com
127.0.0.1 www.aaqadaueorn.com
127.0.0.1 aaqadaueorn.com
127.0.0.1 www.aaqada-ueorn.com
127.0.0.1 aaqada-ueorn.com
127.0.0.1 www.aaqada-ygco.com
127.0.0.1 aaqada-ygco.com
127.0.0.1 www.aaqada-ymct.com
127.0.0.1 aaqada-ymct.com
127.0.0.1 www.aaszxy.ru
127.0.0.1 aaszxy.ru
127.0.0.1 aav2008.com
127.0.0.1 www.aav2008.com
127.0.0.1 aavc.com
127.0.0.1 www.aavira.de
127.0.0.1 aavira.de
127.0.0.1 www.abccodec.com
127.0.0.1 abccodec.com
127.0.0.1 www.abcdperformance.com
127.0.0.1 abcdperformance.com
127.0.0.1 www.abc-find.info
127.0.0.1 abc-find.info
127.0.0.1 abcload.de
127.0.0.1 www.abcload.de
127.0.0.1 www.abcsearch.com
127.0.0.1 abcsearch.com
127.0.0.1 abcways.com
127.0.0.1 www.abcways.com
127.0.0.1 abetterinternet.com
127.0.0.1 www.abetterinternet.com
127.0.0.1 abiword-download.com
127.0.0.1 www.abiword-download.com
127.0.0.1 abnetsoft.info
127.0.0.1 www.abnetsoft.info
127.0.0.1 www.abntivir.de
127.0.0.1 abntivir.de
127.0.0.1 about-adult.net
127.0.0.1 www.about-adult.net
127.0.0.1 aboutclicker.com
127.0.0.1 www.aboutclicker.com
127.0.0.1 www.aboutkimpossible.com
127.0.0.1 aboutkimpossible.com
127.0.0.1 aboveredirect.com
127.0.0.1 www.aboveredirect.com
127.0.0.1 abrp.net
127.0.0.1 www.abrp.net
127.0.0.1 absolutee.com
127.0.0.1 www.absolutee.com
127.0.0.1 abvira.de
127.0.0.1 www.abvira.de
127.0.0.1 www.ac1.healthcare-ultimate.com
127.0.0.1 ac1.healthcare-ultimate.com
127.0.0.1 www.ac66.cn
127.0.0.1 ac66.cn
127.0.0.1 www.acaiporn.info
127.0.0.1 acaiporn.info
127.0.0.1 access.navinetwork.com
127.0.0.1 access.rapid-pass.net
127.0.0.1 accessactivexvideo.com
127.0.0.1 www.accessactivexvideo.com
127.0.0.1 www.accessclips.com
127.0.0.1 accessclips.com
127.0.0.1 access-dvd.com
127.0.0.1 www.access-dvd.com
127.0.0.1 accesskeygenerator.com
127.0.0.1 www.accesskeygenerator.com
127.0.0.1 accessthefuture.net
127.0.0.1 www.accessthefuture.net
127.0.0.1 accessvid.net
127.0.0.1 www.accessvid.net
127.0.0.1 www.acemedic.com
127.0.0.1 acemedic.com
127.0.0.1 www.ace-webmaster.com
127.0.0.1 ace-webmaster.com
127.0.0.1 achatappartement.ch
127.0.0.1 www.achatappartement.ch
127.0.0.1 acjp.com
127.0.0.1 www.acne-stop.net
127.0.0.1 acne-stop.net
127.0.0.1 acrobat-2007.com
127.0.0.1 www.acrobat-2007.com
127.0.0.1 acrobat-8.com
127.0.0.1 www.acrobat-8.com
127.0.0.1 www.acrobat-center.com
127.0.0.1 acrobat-center.com
127.0.0.1 www.acrobat-hq.com
127.0.0.1 acrobat-hq.com
127.0.0.1 acrobatreader-8.com
127.0.0.1 www.acrobatreader-8.com
127.0.0.1 www.acrobat-reader-8.de
127.0.0.1 acrobat-reader-8.de
127.0.0.1 www.acrobat-stop.com
127.0.0.1 acrobat-stop.com
127.0.0.1 actionbreastcancer.org
127.0.0.1 www.actionbreastcancer.org
127.0.0.1 activesearcher.info
127.0.0.1 www.activesearcher.info
127.0.0.1 activesecurityscaner.org
127.0.0.1 www.activesecurityscaner.org
127.0.0.1 www.activexaccessobject.com
127.0.0.1 activexaccessobject.com
127.0.0.1 activexaccessvideo.com
127.0.0.1 www.activexaccessvideo.com
127.0.0.1 activexemedia.com
127.0.0.1 www.activexemedia.com
127.0.0.1 activexmediaobject.com
127.0.0.1 www.activexmediaobject.com
127.0.0.1 activexmediapro.com
127.0.0.1 www.activexmediapro.com
127.0.0.1 www.activexmediasite.com
127.0.0.1 activexmediasite.com
127.0.0.1 www.activexmediasoftware.com
127.0.0.1 activexmediasoftware.com
127.0.0.1 www.activexmediasource.com
127.0.0.1 activexmediasource.com
127.0.0.1 activexmediatool.com
127.0.0.1 www.activexmediatool.com
127.0.0.1 activexmediatour.com
127.0.0.1 www.activexmediatour.com
127.0.0.1 www.activexsoftwares.com
127.0.0.1 activexsoftwares.com
127.0.0.1 www.activexsource.com
127.0.0.1 activexsource.com
127.0.0.1 activexupdate.com
127.0.0.1 www.activexupdate.com
127.0.0.1 activexvideo.com
127.0.0.1 www.activexvideo.com
127.0.0.1 activexvideotool.com
127.0.0.1 www.activexvideotool.com
127.0.0.1 www.acvira.de
127.0.0.1 acvira.de
127.0.0.1 www.ad.marketingsector.com
127.0.0.1 ad.marketingsector.com
127.0.0.1 ad.mokead.com
127.0.0.1 www.ad.mokead.com
127.0.0.1 ad.oinadserver.com
127.0.0.1 ad.outerinfoads.com
127.0.0.1 ad25.com
127.0.0.1 www.ad25.com
127.0.0.1 www.ad45.com
127.0.0.1 ad45.com
127.0.0.1 www.ad77.com
127.0.0.1 ad77.com
127.0.0.1 www.ad86.com
127.0.0.1 ad86.com
127.0.0.1 www.adamsupportgroup.org
127.0.0.1 adamsupportgroup.org
127.0.0.1 www.adarmor.com
127.0.0.1 adarmor.com
127.0.0.1 adasearch.com
127.0.0.1 www.adasearch.com
127.0.0.1 adatoms.com
127.0.0.1 www.adatoms.com
127.0.0.1 adaware.cc
127.0.0.1 adawarenow.com
127.0.0.1 www.adawarenow.com
127.0.0.1 adchannel.contextplus.net
127.0.0.1 addetect.com
127.0.0.1 www.addetect.com
127.0.0.1 www.add-hhh.info
127.0.0.1 add-hhh.info
127.0.0.1 www.addictivetechnologies.com
127.0.0.1 addictivetechnologies.com
127.0.0.1 addictivetechnologies.net
127.0.0.1 www.addictivetechnologies.net
127.0.0.1 www.addioerrori.com
127.0.0.1 addioerrori.com
127.0.0.1 www.add-manager.com
127.0.0.1 add-manager.com
127.0.0.1 www.addresswebsearch.com
127.0.0.1 addresswebsearch.com
127.0.0.1 www.addstand.ru
127.0.0.1 addstand.ru
127.0.0.1 adgate.info
127.0.0.1 www.adgate.info
127.0.0.1 adintelligence.net
127.0.0.1 www.adintelligence.net
127.0.0.1 www.adioserrores.com
127.0.0.1 adioserrores.com
127.0.0.1 adipics.com
127.0.0.1 www.adipics.com
127.0.0.1 www.adlogix.com
127.0.0.1 adlogix.com
127.0.0.1 admin2cash.biz
127.0.0.1 www.admin2cash.biz
127.0.0.1 adnet-plus.com
127.0.0.1 adnetserver.com
127.0.0.1 www.adnetserver.com
127.0.0.1 adobe-9.com
127.0.0.1 www.adobe-9.com
127.0.0.1 adobe-download-now.com
127.0.0.1 www.adobe-downloads.com
127.0.0.1 adobe-downloads.com
127.0.0.1 www.adobe-reader-8.fr
127.0.0.1 adobe-reader-8.fr
127.0.0.1 adprotect.com
127.0.0.1 www.adprotect.com
127.0.0.1 ads.agadoo.biz
127.0.0.1 ads.centralmedia.ws
127.0.0.1 ads.k8l.info
127.0.0.1 ads.kmpads.com
127.0.0.1 ads.kw.revenue.net
127.0.0.1 ads.marketingsector.com
127.0.0.1 ads.searchingbooth.com
127.0.0.1 ads.z-quest.com
127.0.0.1 ads1.revenue.net
127.0.0.1 www.ads183.com
127.0.0.1 ads183.com
127.0.0.1 www.adscontex.com
127.0.0.1 adscontex.com
127.0.0.1 www.adservices1.enhance.com
127.0.0.1 adservices1.enhance.com
127.0.0.1 adserving.favorit-network.com
127.0.0.1 adservs.com
127.0.0.1 www.adsextend.net
127.0.0.1 adsextend.net
127.0.0.1 www.adshttp.com
127.0.0.1 adshttp.com
127.0.0.1 www.adsniffer.com
127.0.0.1 adsniffer.com
127.0.0.1 www.adsonwww.com
127.0.0.1 adsonwww.com
127.0.0.1 adspics.com
127.0.0.1 www.adspics.com
127.0.0.1 www.adsrevenue.net
127.0.0.1 adsrevenue.net
127.0.0.1 www.adtrak.net
127.0.0.1 adtrak.net
127.0.0.1 adtrgt.com
127.0.0.1 adult18codec.com
127.0.0.1 www.adult18codec.com
127.0.0.1 www.adult777search.info
127.0.0.1 adult777search.info
127.0.0.1 adultan.com
127.0.0.1 www.adultan.com
127.0.0.1 www.adultcodec-2008.com
127.0.0.1 adultcodec-2008.com
127.0.0.1 www.adultcodecstars.com
127.0.0.1 adultcodecstars.com
127.0.0.1 www.adult-engine-search.com
127.0.0.1 adult-engine-search.com
127.0.0.1 www.adult-erotic-guide.net
127.0.0.1 adult-erotic-guide.net
127.0.0.1 adultfilmsite.com
127.0.0.1 www.adultfilmsite.com
127.0.0.1 www.adult-friends-finder.net
127.0.0.1 adult-friends-finder.net
127.0.0.1 adultgambling.org
127.0.0.1 adult-host.org
127.0.0.1 adulthyperlinks.com
127.0.0.1 www.adulthyperlinks.com
127.0.0.1 adultmovieplus.com
127.0.0.1 www.adultmovieplus.com
127.0.0.1 adult-mpg.net
127.0.0.1 www.adult-mpg.net
127.0.0.1 adult-personal.us
127.0.0.1 adultsgames.net
127.0.0.1 www.adultsonlyvids.com
127.0.0.1 adultsonlyvids.com
127.0.0.1 www.adultsper.com
127.0.0.1 adultsper.com
127.0.0.1 adulttds.com
127.0.0.1 www.adulttds.com
127.0.0.1 adultzoneworld.com
127.0.0.1 www.adultzoneworld.com
127.0.0.1 www.advancedcleaner.com
127.0.0.1 advancedcleaner.com
127.0.0.1 advancedetective.com
127.0.0.1 www.advancedetective.com
127.0.0.1 www.advancedpccleaner.com
127.0.0.1 advancedpccleaner.com
127.0.0.1 advancedxpfixer.com
127.0.0.1 www.advancedxpfixer.com
127.0.0.1 www.advancesoftpc.com
127.0.0.1 advancesoftpc.com
127.0.0.1 advcash.biz
127.0.0.1 www.advcash.biz
127.0.0.1 advert.exaccess.ru
127.0.0.1 www.advertisemoney.info
127.0.0.1 advertisemoney.info
127.0.0.1 advertising.paltalk.com
127.0.0.1 advertising-money.info
127.0.0.1 www.advertising-money.info
127.0.0.1 advert-network.com
127.0.0.1 www.advert-network.com
127.0.0.1 ad-ware.cc
127.0.0.1 ad-w-a-r-e.com
127.0.0.1 www.ad-w-a-r-e.com
127.0.0.1 a-d-w-a-r-e.com
127.0.0.1 www.a-d-w-a-r-e.com
127.0.0.1 adware.pro
127.0.0.1 www.adware.pro
127.0.0.1 www.adwarealert.com
127.0.0.1 adwarealert.com
127.0.0.1 ad-warealert.com
127.0.0.1 www.ad-warealert.com
127.0.0.1 adwarearrest.com
127.0.0.1 www.adwarearrest.com
127.0.0.1 adwarebazooka.com
127.0.0.1 www.adwarebazooka.com
127.0.0.1 adwarebot.com
127.0.0.1 www.adwarebot.com
127.0.0.1 www.adwarecommander.com
127.0.0.1 adwarecommander.com
127.0.0.1 adwaredeluxe.com
127.0.0.1 www.adwaredeluxe.com
127.0.0.1 adware-download.com
127.0.0.1 www.adware-download.com
127.0.0.1 adwarefinder.com
127.0.0.1 www.adwarefinder.com
127.0.0.1 www.adwaregold.com
127.0.0.1 adwaregold.com
127.0.0.1 www.adwarepatrol.com
127.0.0.1 adwarepatrol.com
127.0.0.1 www.adwareplatinum.com
127.0.0.1 adwareplatinum.com
127.0.0.1 www.adwarepro.org
127.0.0.1 adwarepro.org
127.0.0.1 www.adwareprofessional.com
127.0.0.1 adwareprofessional.com
127.0.0.1 www.adwareprotectionsite.com
127.0.0.1 adwareprotectionsite.com
127.0.0.1 www.adwarepunisher.com
127.0.0.1 adwarepunisher.com
127.0.0.1 www.adwareremover.ws
127.0.0.1 adwareremover.ws
127.0.0.1 www.adwaresafety.com
127.0.0.1 adwaresafety.com
127.0.0.1 www.adwarexp.com
127.0.0.1 adwarexp.com
127.0.0.1 www.adwareye.com
127.0.0.1 adwareye.com
127.0.0.1 affiliate.idownload.com
127.0.0.1 www.aflgate.com
127.0.0.1 aflgate.com
127.0.0.1 www.afporn7.info
127.0.0.1 afporn7.info
127.0.0.1 africaspromise.org
127.0.0.1 www.agadoo.biz
127.0.0.1 agadoo.biz
127.0.0.1 www.againstate.ru
127.0.0.1 againstate.ru
127.0.0.1 www.agejoyful.ru
127.0.0.1 agejoyful.ru
127.0.0.1 agentstudio.com
127.0.0.1 www.ageofconans.net
127.0.0.1 ageofconans.net
127.0.0.1 www.agiloo.net
127.0.0.1 agiloo.net
127.0.0.1 www.aginegialle.it
127.0.0.1 aginegialle.it
127.0.0.1 www.aglowcopy.ru
127.0.0.1 aglowcopy.ru
127.0.0.1 www.agmoky.info
127.0.0.1 agmoky.info
127.0.0.1 www.agporn.info
127.0.0.1 agporn.info
127.0.0.1 www.ahnenforschung.de
127.0.0.1 ahnenforschung.de
127.0.0.1 www.ahtivir.de
127.0.0.1 ahtivir.de
127.0.0.1 www.aifind.info
127.0.0.1 aifind.info
127.0.0.1 www.aircolumn.com
127.0.0.1 aircolumn.com
127.0.0.1 www.airjordans.cc
127.0.0.1 airjordans.cc
127.0.0.1 www.airtleworld.com
127.0.0.1 airtleworld.com
127.0.0.1 www.aitalia.it
127.0.0.1 aitalia.it
127.0.0.1 www.aivira.de
127.0.0.1 aivira.de
127.0.0.1 ak74r262qse.ciwnulvu.com
127.0.0.1 akamai.downloadv3.com
127.0.0.1 www.akibamaniacs.com
127.0.0.1 akibamaniacs.com
127.0.0.1 www.aklitalia.it
127.0.0.1 aklitalia.it
127.0.0.1 akril.com
127.0.0.1 www.alawwal.ae
127.0.0.1 alawwal.ae
127.0.0.1 www.alblogspot.com
127.0.0.1 alblogspot.com
127.0.0.1 alcatel.ws
127.0.0.1 www.alertspy.com
127.0.0.1 alertspy.com
127.0.0.1 alfacleaner.com
127.0.0.1 www.alfacleaner.com
127.0.0.1 alfa-search.com
127.0.0.1 www.alialia.it
127.0.0.1 alialia.it
127.0.0.1 www.alimentiveness.net
127.0.0.1 alimentiveness.net
127.0.0.1 www.aliotalia.it
127.0.0.1 aliotalia.it
127.0.0.1 www.alirtalia.it
127.0.0.1 alirtalia.it
127.0.0.1 www.alitaia.it
127.0.0.1 alitaia.it
127.0.0.1 www.alitaklia.it
127.0.0.1 alitaklia.it
127.0.0.1 www.alitala.it
127.0.0.1 alitala.it
127.0.0.1 www.alitali.it
127.0.0.1 alitali.it
127.0.0.1 www.alitaliaq.it
127.0.0.1 alitaliaq.it
127.0.0.1 www.alitalias.it
127.0.0.1 alitalias.it
127.0.0.1 www.alitaliaz.it
127.0.0.1 alitaliaz.it
127.0.0.1 www.alitalioa.it
127.0.0.1 alitalioa.it
127.0.0.1 www.alitalisa.it
127.0.0.1 alitalisa.it
127.0.0.1 www.alitaliua.it
127.0.0.1 alitaliua.it
127.0.0.1 www.alitalkia.it
127.0.0.1 alitalkia.it
127.0.0.1 www.alitaloia.it
127.0.0.1 alitaloia.it
127.0.0.1 www.alitaluia.it
127.0.0.1 alitaluia.it
127.0.0.1 www.alitaslia.it
127.0.0.1 alitaslia.it
127.0.0.1 www.alitlia.it
127.0.0.1 alitlia.it
127.0.0.1 www.alitralia.it
127.0.0.1 alitralia.it
127.0.0.1 www.alitsalia.it
127.0.0.1 alitsalia.it
127.0.0.1 www.aliutalia.it
127.0.0.1 aliutalia.it
127.0.0.1 all1count.net
127.0.0.1 www.all1count.net
127.0.0.1 www.all4internet.com
127.0.0.1 all4internet.com
127.0.0.1 allabtcars.com
127.0.0.1 allabtjeeps.com
127.0.0.1 www.alladwareremover.com
127.0.0.1 alladwareremover.com
127.0.0.1 allavers.org
127.0.0.1 www.allavers.org
127.0.0.1 www.all-bittorrent.com
127.0.0.1 all-bittorrent.com
127.0.0.1 allcollisions.com
127.0.0.1 www.allcollisions.com
127.0.0.1 allcybersearch.com
127.0.0.1 www.allcybersearch.com
127.0.0.1 www.alldiskscheck300.com
127.0.0.1 alldiskscheck300.com
127.0.0.1 www.alldnserrors.com
127.0.0.1 alldnserrors.com
127.0.0.1 www.all-downloads-now.com
127.0.0.1 all-downloads-now.com
127.0.0.1 all-edonkey.com
127.0.0.1 www.all-edonkey.com
127.0.0.1 www.allertaminacce.com
127.0.0.1 allertaminacce.com
127.0.0.1 www.allew.com
127.0.0.1 allew.com
127.0.0.1 allforadult.com
127.0.0.1 allhyperlinks.com
127.0.0.1 www.alliesecurity.com
127.0.0.1 alliesecurity.com
127.0.0.1 all-inet.com
127.0.0.1 allinternetbusiness.com
127.0.0.1 all-limewire.com
127.0.0.1 www.all-limewire.com
127.0.0.1 allmegabucks.com
127.0.0.1 www.allmegabucks.com
127.0.0.1 www.allprotections.com
127.0.0.1 allprotections.com
127.0.0.1 www.allresultz.net
127.0.0.1 allresultz.net
127.0.0.1 www.allrssfeeds.net
127.0.0.1 allrssfeeds.net
127.0.0.1 www.allsearch.us
127.0.0.1 allsearch.us
127.0.0.1 www.allsecuritynotes.com
127.0.0.1 allsecuritynotes.com
127.0.0.1 www.allsecuritysite.com
127.0.0.1 allsecuritysite.com
127.0.0.1 www.allstarsvideos.net
127.0.0.1 allstarsvideos.net
127.0.0.1 www.allthingsshining.com
127.0.0.1 allthingsshining.com
127.0.0.1 www.alltiettantivirus.com
127.0.0.1 alltiettantivirus.com
127.0.0.1 www.alltruesoftware.com
127.0.0.1 alltruesoftware.com
127.0.0.1 www.allvideoactivex.com
127.0.0.1 allvideoactivex.com
127.0.0.1 www.almanah.biz
127.0.0.1 almanah.biz
127.0.0.1 almarvideos.com
127.0.0.1 www.aloitalia.it
127.0.0.1 aloitalia.it
127.0.0.1 www.alphawipe.com
127.0.0.1 alphawipe.com
127.0.0.1 www.alporn.info
127.0.0.1 alporn.info
127.0.0.1 www.alr3ady.net
127.0.0.1 alr3ady.net
127.0.0.1 www.altuporns.info
127.0.0.1 altuporns.info
127.0.0.1 www.aluitalia.it
127.0.0.1 aluitalia.it
127.0.0.1 www.alwayslive.ru
127.0.0.1 alwayslive.ru
127.0.0.1 www.alwayswonder.ru
127.0.0.1 alwayswonder.ru
127.0.0.1 www.amaena.com
127.0.0.1 amaena.com
127.0.0.1 amandamountains.com
127.0.0.1 www.amateurliveshow.com
127.0.0.1 amateurliveshow.com
127.0.0.1 www.amazingglorious.net
127.0.0.1 amazingglorious.net
127.0.0.1 www.amazinghilarious.net
127.0.0.1 amazinghilarious.net
127.0.0.1 www.amazingmedicalspot.com
127.0.0.1 amazingmedicalspot.com
127.0.0.1 www.amazingpuzzled.net
127.0.0.1 amazingpuzzled.net
127.0.0.1 www.amediasoftware.com
127.0.0.1 amediasoftware.com
127.0.0.1 www.amediasource.com
127.0.0.1 amediasource.com
127.0.0.1 www.americamp3network.com
127.0.0.1 americamp3network.com
127.0.0.1 americanautobargains.com
127.0.0.1 www.americanautobargains.com
127.0.0.1 americancarbargains.com
127.0.0.1 www.americancarbargains.com
127.0.0.1 americanprepperspatriot.com
127.0.0.1 www.americanprepperspatriot.com
127.0.0.1 american-teens.net
127.0.0.1 amigeek.com
127.0.0.1 www.amigobore.com
127.0.0.1 amigobore.com
127.0.0.1 amisbusiness.com
127.0.0.1 www.ammersmicht.net
127.0.0.1 ammersmicht.net
127.0.0.1 www.amntivir.de
127.0.0.1 amntivir.de
127.0.0.1 www.ampmsearch.com
127.0.0.1 ampmsearch.com
127.0.0.1 www.amydphoto.com
127.0.0.1 amydphoto.com
127.0.0.1 www.analcord.com
127.0.0.1 analcord.com
127.0.0.1 analmovi.com
127.0.0.1 www.anarchylolita.com
127.0.0.1 anarchylolita.com
127.0.0.1 anarchyporn.com
127.0.0.1 www.anatociskm.net
127.0.0.1 anatociskm.net
127.0.0.1 www.anbtivir.de
127.0.0.1 anbtivir.de
127.0.0.1 www.andlucid.ru
127.0.0.1 andlucid.ru
127.0.0.1 www.andseeker.ru
127.0.0.1 andseeker.ru
127.0.0.1 www.anfivir.de
127.0.0.1 anfivir.de
127.0.0.1 www.animadverter.net
127.0.0.1 animadverter.net
127.0.0.1 www.animepornmag.com
127.0.0.1 animepornmag.com
127.0.0.1 anin.org
127.0.0.1 www.anjpn-avxiz.biz
127.0.0.1 anjpn-avxiz.biz
127.0.0.1 anjpnzqav.biz
127.0.0.1 www.anjpnzqav.biz
127.0.0.1 anjpn-zqav.biz
127.0.0.1 www.anjpn-zqav.biz
127.0.0.1 anmtivir.de
127.0.0.1 www.anmtivir.de
127.0.0.1 annaromeo.com
127.0.0.1 www.anntivir.de
127.0.0.1 anntivir.de
127.0.0.1 www.anomalistical.net
127.0.0.1 anomalistical.net
127.0.0.1 www.anporn.info
127.0.0.1 anporn.info
127.0.0.1 www.anrtivir.de
127.0.0.1 anrtivir.de
127.0.0.1 www.antevir.de
127.0.0.1 antevir.de
127.0.0.1 www.antiaid.com
127.0.0.1 www.antibvir.de
127.0.0.1 antibvir.de
127.0.0.1 www.anticir.de
127.0.0.1 anticir.de
127.0.0.1 anticvir.de
127.0.0.1 www.anticvir.de
127.0.0.1 antiddos.us
127.0.0.1 www.antiddos.us
127.0.0.1 www.antiespiadorado.com
127.0.0.1 antiespiadorado.com
127.0.0.1 www.antiespionspack.com
127.0.0.1 antiespionspack.com
127.0.0.1 www.antigusanos2008.com
127.0.0.1 antigusanos2008.com
127.0.0.1 www.antiivir.de
127.0.0.1 antiivir.de
127.0.0.1 antimalwareguard.com
127.0.0.1 www.antimalwareguard.com
127.0.0.1 antiovir.de
127.0.0.1 www.antiovir.de
127.0.0.1 antispamassistant.com
127.0.0.1 www.antispamassistant.com
127.0.0.1 antispamdeluxe.com
127.0.0.1 www.antispamdeluxe.com
127.0.0.1 www.antispionage.com
127.0.0.1 antispionage.com
127.0.0.1 antispionagepro.com
127.0.0.1 www.antispionagepro.com
127.0.0.1 antispyadvanced.com
127.0.0.1 www.antispyadvanced.com
127.0.0.1 www.antispycheck.com
127.0.0.1 antispycheck.com
127.0.0.1 www.antispydns.biz
127.0.0.1 antispydns.biz
127.0.0.1 antispyexpert.com
127.0.0.1 www.antispyexpert.com
127.0.0.1 www.antispyfond.com
127.0.0.1 antispyfond.com
127.0.0.1 www.antispykit.com
127.0.0.1 antispykit.com
127.0.0.1 www.antispylab.com
127.0.0.1 antispylab.com
127.0.0.1 www.antispyroad.com
127.0.0.1 antispyroad.com
127.0.0.1 www.antispyshield.com
127.0.0.1 antispyshield.com
127.0.0.1 antispysolutions.com
127.0.0.1 www.antispysolutions.com
127.0.0.1 antispy-test8.com
127.0.0.1 www.antispy-test8.com
127.0.0.1 antispyware.com
127.0.0.1 www.antispyware.com
127.0.0.1 antispyware-2008.info
127.0.0.1 www.antispyware-2008.info
127.0.0.1 antispyware2008.name
127.0.0.1 www.antispyware2008.name
127.0.0.1 www.antispyware-2008.name
127.0.0.1 antispyware-2008.name
127.0.0.1 antispyware2008.org
127.0.0.1 www.antispyware2008.org
127.0.0.1 www.antispyware-2008.org
127.0.0.1 antispyware-2008.org
127.0.0.1 antispyware2008-download.com
127.0.0.1 www.antispyware2008-download.com
127.0.0.1 www.antispyware-2008-download.com
127.0.0.1 antispyware-2008-download.com
127.0.0.1 antispyware2008-download.name
127.0.0.1 www.antispyware2008-download.name
127.0.0.1 antispyware2008-download.org
127.0.0.1 www.antispyware2008-download.org
127.0.0.1 antispyware-2008-download.org
127.0.0.1 www.antispyware-2008-download.org
127.0.0.1 www.antispywareboot.com
127.0.0.1 antispywareboot.com
127.0.0.1 antispywarebot.com
127.0.0.1 www.antispywarebot.com
127.0.0.1 www.antispywarebox.com
127.0.0.1 antispywarebox.com
127.0.0.1 antispywaredownloads.com
127.0.0.1 www.antispywaredownloads.com
127.0.0.1 www.antispywareexpert.com
127.0.0.1 antispywareexpert.com
127.0.0.1 antispywaremaster.com
127.0.0.1 www.antispywaremaster.com
127.0.0.1 www.antispyware-review.biz
127.0.0.1 antispyware-review.biz
127.0.0.1 antispyware-review.info
127.0.0.1 www.antispyware-review.info
127.0.0.1 www.antispywaresales.com
127.0.0.1 antispywaresales.com
127.0.0.1 antispywaresuite.com
127.0.0.1 www.antispywaresuite.com
127.0.0.1 www.antispywareupdates.net
127.0.0.1 antispywareupdates.net
127.0.0.1 antispywarexp.com
127.0.0.1 www.antispywarexp.com
127.0.0.1 antispyweb.net
127.0.0.1 www.antispyweb.net
127.0.0.1 antispywork.com
127.0.0.1 www.antispywork.com
127.0.0.1 www.antispywork.net
127.0.0.1 antispywork.net
127.0.0.1 antiuvir.de
127.0.0.1 www.antiuvir.de
127.0.0.1 www.antivbir.de
127.0.0.1 antivbir.de
127.0.0.1 www.antivcir.de
127.0.0.1 antivcir.de
127.0.0.1 www.antiver2008.com
127.0.0.1 antiver2008.com
127.0.0.1 www.antivermins.com
127.0.0.1 antivermins.com
127.0.0.1
…

Anbefaler ingen å gå inn på disse sidene. Det gjør dere på eget ansvar.

Liv har også fått brannmur deaktivert.

Microsoft Windows 8  6.2.9200.0.1252.47.1044.18.3988.2757 [GMT 2:00]
Kjører fra: c:usersPurresDesktopComboFix.exe
AV: Webroot SecureAnywhere *Disabled/Updated* {9C0666FC-6C7D-3E97-3C40-0C6B33FC7401}
AV: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Webroot SecureAnywhere *Disabled/Updated* {27678718-4A47-3119-06F0-3719487B3EBC}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 

http://www.tenable.com/blog/using-nessus-to-discover-malware-and-botnet-hosts
Alle nye pc`er i dag kommer med ett recovery område på pc `en så den kan tilbakestilles til fabrikkinstillinger, men her har det blitt tullet med uten at bruker har gjort noe.
 
Liv Dineen har også 98 oppdateringer som venter i Windows update, men de blir ikke oppdatert.
 
Det er også problemer med partisjoner med pc. Det skal være 2, men bruker hadde 6 stk.
 
 
HP har bistått henne med å fjerne partisjoner, men det klarte de ikke.
 
Jeg ba bruker laste ned Nessus. Det er ett program som kan scanne etter botnet. Dette er resultatet.
 
 

 

 
 
 
Etter scanning er router og andre viktige systemer åpne. Programmet rapporterer om feil som er kritiske.
 
Har anbefalt bruker å kontakte leverandør av router og pc for mere hjelp. Microsoft og HP har bistått henne i denne saken så langt uten at hun har kommet så mye på vei.
 
Dette er også min første botnet sak det kan forekomme feil på artikkelen.
 
Håper at HP, Microsoft eller andre kan bistå i saken og få løst dette problemet.
 
Ta kontakt på www.facebook.com/datahjelperne  hvis du har noen tips i saken.
 
 

For andre artikler se her, også sjekk ut oss på sosiale medier Facebook og Twitter.

Exit mobile version