PPRuNe Forums - View Single Post - HTTP ZBOT activity
View Single Post
Old 2nd January 2011 | 09:49
  #3 (permalink)  
Tarq57
20 Anniversary
 
Joined: Dec 2005
Posts: 1,694
Likes: 15
From: Wellington,NZ
That url (200.56.243.137) produces an immediate antivirus block when connection is attempted; the AV info describes it as a malicious attack site.

As hellsbrink said, you have a malicious program (keylogger, or whatever) installed on your machine now that is attempting to connect outbound. Fortunately blocked by your AV.

MBAM is a very good demand scanner/cleaner. That's what I'd do next.
Tarq57 is offline  
Reply