Hardware Analysis Community Forums http://www.hardwareanalysis.com/content/topic/20100/ 2009-11-08T01:10:46-05:00 http://www.hardwareanalysis.com/content/topic/20100/ /images/halogo.gif text/html 2004-02-10T01:25:33-05:00 Herb Keister http://www.hardwareanalysis.com/content/topic/20100/?o=20#102227 Jay, glad I could help, happy surfing! text/html 2004-02-07T04:02:21-05:00 Jay G http://www.hardwareanalysis.com/content/topic/20100/#101300 thanks! CW Shreader worked ! thanks! text/html 2004-02-05T18:23:08-05:00 Aaron Kamins http://www.hardwareanalysis.com/content/topic/20100/#100835 I hope this doesnt come out butchered. <img src="/images/smilies/smile2.gif" width="14" height="14" border="0" alt=":(" title=":("><br /> <br /> <br /> <br /> | 0 | | 212.254.207.15 | noc.bboxbbs.ch Buemplizer Box |<br /> 1 | | 212.254.207.1 | router-bb-bern2.bboxbbs.ch | Bern, Switzerland | | Buemplizer Box <br /> | 2 | | 212.254.206.1 | router-bb-bern1.bboxbbs.ch | Bern, Switzerland | +01:00 | 19 | x- | Buemplizer Box |<br /> | 3 | | 212.254.255.130 | be-core-02.tiscali.ch | ?(Switzerland)| 138 | -----x---- | DataComm (Schweiz) AG |<br /> | 4 | | 212.254.255.214 | glatt-core-02-se12-0-0.tiscali.ch | ?(Switzerland) | +01:00 | 28 | -x | DataComm (Schweiz) AG |<br /> | 5 | | 213.200.70.41 | so-3-0-0.zur10.ip.tiscali.net | - | | 12 | x- | Tiscali International Network B.V. |<br /> | 6 | | 213.200.81.233 | so-0-0-0.fra40.ip.tiscali.net | Frankfurt, Germany | +01:00 | 17 | x | Tiscali International Network B.V. |<br /> | 7 | | 146.188.50.73 | pos3-3.br2.fft1.alter.net | Frankfurt, Germany | +01:00 | 10 | x | RIPE Network Coordination Centre RIPE-ERX-146-188-0-0 |<br /> | 8 | | 146.188.6.113 | so-0-2-0.tr2.fft1.alter.net | Frankfurt, Germany | +01:00 | 10 | x | RIPE Network Coordination Centre RIPE-ERX-146-188-0-0 |<br /> | 9 | | 146.188.7.33 | so-6-0-0.tr2.stk2.alter.net | Stockholm, Sweden | +01:00 | 40 | x- | RIPE Network Coordination Centre RIPE-ERX-146-188-0-0 |<br /> | 10 | | 146.188.11.237 | ge-0-3-0.xr1.stk3.alter.net | Stockholm, Sweden | +01:00 | 41 | x- | RIPE Network Coordination Centre RIPE-ERX-146-188-0-0 |<br /> | 11 | | 146.188.7.78 | pos1-0.gw9.stk3.alter.net | Stockholm, Sweden | +01:00 | 40 | x | RIPE Network Coordination Centre RIPE-ERX-146-188-0-0 |<br /> | 12 | | 146.188.65.38 | sovintel-gw.customer.alter.net | - | | 68 | x | RIPE Network Coordination Centre RIPE-ERX-146-188-0-0 |<br /> | 13 | | 194.186.157.218 | cisco1.spb.gldn.net | - | | 71 | -x | Sovam Teleport |<br /> | 14 | | 194.67.7.178 | cat6500-g-1-1.spb.gldn.net | - | | 70 | x | Teleross |<br /> | 15 | | 194.186.103.134 | iks-gw.spb.gldn.net | - | | 71 | -x | Sovam Teleport |<br /> | 16 | 20 | 193.125.201.49 | c-49-africa-md-satelite1.realsearch.ws | ?(Russia) <br /> || ? | | 81.211.105.10 | - | ?(Russia) | | | | ICS TM, JSC |<br /> --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------<br /> text/html 2004-02-05T16:14:48-05:00 Thomas Vander Vliet http://www.hardwareanalysis.com/content/topic/20100/#100808 Have you tried to use system restore? text/html 2004-02-05T16:13:27-05:00 Thomas Vander Vliet http://www.hardwareanalysis.com/content/topic/20100/#100806 have you downloaded some software that could possibly be a virus? text/html 2004-02-04T18:35:01-05:00 angryhippy http://www.hardwareanalysis.com/content/topic/20100/#100354 Did you think my post was made up? That's the real deal bubba. text/html 2004-02-04T14:38:22-05:00 Michael A. http://www.hardwareanalysis.com/content/topic/20100/#100258 Hey man. Back the hell off the Russians. text/html 2004-02-03T03:41:40-05:00 Herb Keister http://www.hardwareanalysis.com/content/topic/20100/#99719 Jay, you might have a bug, I got it once, did the same thing but to a different site. Do a search for cw shredder, download and run it, it should fix it for you. Regular bugs killers like spybot s&amp;d won't even find it. text/html 2004-02-02T19:10:27-05:00 Nick M. http://www.hardwareanalysis.com/content/topic/20100/#99526 did you try nuking the hosts file? text/html 2004-02-02T07:26:11-05:00 angryhippy http://www.hardwareanalysis.com/content/topic/20100/#99343 Where there is a will there is a way. That IP address is in St' Petersberg Russia.. netname &quot;SOVINTEL-ICSTM2 Damned man is the Russian Secret Service after you? Did you tell a Rushky joke or what? AH HA HA HA HA HA HA! Sorry I couldn't resist. Here is the info on the IP.<br /> <br /> <br /> <br /> Trying whois -h whois.arin.net 81.211.105.10<br /> Error - couldn't connect to server<br /> <br /> Trying whois -h whois.arin.net 81.211.105.10<br /> <br /> OrgName: RIPE Network Coordination Centre <br /> OrgID: RIPE<br /> Address: Singel 258<br /> Address: 1016 AB<br /> City: Amsterdam<br /> StateProv: <br /> PostalCode: <br /> Country: NL<br /> <br /> ReferralServer: <a class="ext" href="/action/r/whois://whois.ripe.net" target="_blank">whois://whois.ripe.net</a><br /> <br /> NetRange: 81.0.0.0 - 81.255.255.255 <br /> CIDR: 81.0.0.0/8 <br /> NetName: 81-RIPE<br /> NetHandle: NET-81-0-0-0-1<br /> Parent: <br /> NetType: Allocated to RIPE NCC<br /> NameServer: NS.RIPE.NET<br /> NameServer: NS3.NIC.FR<br /> NameServer: SUNIC.SUNET.SE<br /> NameServer: AUTH62.NS.UU.NET<br /> NameServer: SEC1.APNIC.NET<br /> NameServer: SEC3.APNIC.NET<br /> NameServer: TINNIE.ARIN.NET<br /> Comment: These addresses have been further assigned to users in<br /> Comment: the RIPE NCC region. Contact information can be found in<br /> Comment: the RIPE database at <a class="ext" href="/action/r/http://www.ripe.net/whois" target="_blank">http://www.ripe.net/whois</a><br /> RegDate: <br /> Updated: 2003-09-19<br /> <br /> OrgTechHandle: RIPE-NCC-ARIN<br /> OrgTechName: RIPE NCC Hostmaster <br /> OrgTechPhone: +31 20 535 4444<br /> OrgTechEmail: <a class="ext" href="mailto:search-ripe-ncc-not-arin@ripe.net">search-ripe-ncc-not-arin@ripe.net</a><br /> <br /> # ARIN WHOIS database, last updated 2004-02-01 19:15<br /> # Enter ? for additional hints on searching ARIN's WHOIS database.<br /> <br /> <br /> Trying whois -h whois.ripe.net 81.211.105.10<br /> % This is the RIPE Whois server.<br /> % The objects are in RPSL format.<br /> %<br /> % Rights restricted by copyright.<br /> % See <a class="ext" href="/action/r/http://www.ripe.net/ripencc/pub-services/db/copyright.html" target="_blank">http://www.ripe.net/ripencc/pub-services/db/copyright.html</a><br /> <br /> inetnum: 81.211.105.0 - 81.211.105.255<br /> netname: SOVINTEL-ICSTM2<br /> descr: ICS TM, JSC<br /> descr: 70 Bolshoy pr. V.O.<br /> descr: 199002 St.-Petersburg<br /> country: RU<br /> admin-c: PSA13-RIPE<br /> tech-c: PSA13-RIPE<br /> status: ASSIGNED PA<br /> notify: <a class="ext" href="mailto:dnsmaster@ilca.ru">dnsmaster@ilca.ru</a><br /> mnt-by: SOVINTEL-MNT<br /> changed: <a class="ext" href="mailto:marty@sovintel.ru">marty@sovintel.ru</a> 20031203<br /> source: RIPE<br /> <br /> route: 81.211.105.0/24<br /> descr: SOVINTEL-ICSTM2<br /> origin: AS16354<br /> mnt-by: SOVINTEL-MNT<br /> changed: <a class="ext" href="mailto:marty@sovintel.ru">marty@sovintel.ru</a> 20031203<br /> source: RIPE<br /> <br /> person: Prasolov S A<br /> address: ICS TM<br /> address: 70 Bolshoy pr. V.O.<br /> address: 199002 St.-Petersburg<br /> address: Russia<br /> phone: +7 812 3291492<br /> fax-no: +7 812 3222242<br /> e-mail: <a class="ext" href="mailto:dnsmaster@ilca.ru">dnsmaster@ilca.ru</a><br /> nic-hdl: PSA13-RIPE<br /> notify: <a class="ext" href="mailto:dnsmaster@ilca.ru">dnsmaster@ilca.ru</a><br /> mnt-by: SOVINTEL-MNT<br /> changed: <a class="ext" href="mailto:marty@sovintel.ru">marty@sovintel.ru</a> 20031203<br /> source: RIPE<br /> <br /> <br /> Don't you all love these russian hackers. Better watch out Jay, with the Patriot Act and all, the CRAB junta may have you locked up at Guantanimo as an enemy combatant for communicating with foreign agents. P.S. Just kidding about secret service. SOVINTEL is the russian phone company This IP is the address for a European Search service and data base. I don't know why it's directing you, unless you gave the wrong address or I am missing something. Anyway here's the info. text/html 2004-02-01T22:59:30-05:00 Jay G http://www.hardwareanalysis.com/content/topic/20100/#99209 it is always <a class="ext" href="/action/r/http://81.211.105.10/(thing" target="_blank">http://81.211.105.10/(thing</a> I am searching for)<br /> text/html 2004-02-01T21:04:45-05:00 Nick M. http://www.hardwareanalysis.com/content/topic/20100/#99175 any luck? text/html 2004-01-31T12:00:22-05:00 angryhippy http://www.hardwareanalysis.com/content/topic/20100/#98703 Before you do anything, tell us the website the browser hijacker you downloaded somewhere is taking you to. Then we can figure out which anti-spyware program can clean it. Do you have spybpt Search and Destroy? If so open the advanced program from the start menu, then click on the &quot;Excludes&quot; button and go to the Hijackers.sbi tab. If it's listed there Spybot can clean the program. If not check the All Products tab. Then go to the tools button and click on startup items. If it's listed there you can remove it and it's registry by highlighting it and hitting the delete tab. If you don't have Spybot S&amp;D you should. text/html 2004-01-31T07:46:37-05:00 Nick M. http://www.hardwareanalysis.com/content/topic/20100/#98662 Search for a file called hosts. it should be in your sys32 folder or a sub dir from there. deleate that file and reboot. windows will recreate it. that should fix it for you. text/html 2004-01-31T06:33:07-05:00 Francisco Pedro http://www.hardwareanalysis.com/content/topic/20100/#98655 First of all, there are registry cleaners (search in google), but it won't do this job.<br /> To solve your problem you must go to Regedit MANUALLY and search for the site, but without <a class="ext" href="/action/r/http://." target="_blank">http://.</a> Probably you'll find it as <a class="ext" href="/action/r/http://whatyousearchedfor." target="_blank">http://whatyousearchedfor.</a> Go to that key and just clean that leaving http:// intact; press F3 and continue searching and deleting until it finishes.<br /> After that update your windows with those critical errors (it helps), install an anti-virus, firewall and install Lavasoft Ad-Aware 6 without forgetting the updates for this three too.<br /> <br /> I really think this will solve your problem, it solved mine <img src="/images/smilies/smile4.gif" width="14" height="14" border="0" alt=";)" title=";)"><br /> <br /> By the way, also make a search in your registry for <a class="ext" target="_blank" href="/action/r/http://wmmse.com">wmmse.com</a>, if you find delete it (don't go to the site just find and delete it from registry).<br /> <br /> Good Luck !!