vrp1.ric.xpc-mii.net

[Haney]

I got a pop-up from Zone Alarm Pro that iexplore.exe was trying to access
64.191.208.114, and should it deny or allow this access. Being suspicious,
I did nslookup on this address and got vrp1.ric.xpc-mii.net. I googled that
name, and got back links to two pages that both contained porn. One of them
produced a notice that one of my anti-malware programs had blocked access to
JSP.DRIVECLEANER.COM, a known malware site.

I ran a scan of my system with the latest version of Webroot Spy Sweeper
and Ad-Aware 2007, neither of which found anything. I also searched my
registry, but didn't find anything. Can anyone please tell me what I've got
on my system that is doing this, and how to get rid of it? Thanks!

[David H. Lipman]

From: "Haney" <robert_haney@ae.ge.com>

| I got a pop-up from Zone Alarm Pro that iexplore.exe was trying to access
| 64.191.208.114, and should it deny or allow this access. Being suspicious,
| I did nslookup on this address and got vrp1.ric.xpc-mii.net. I googled that
| name, and got back links to two pages that both contained porn. One of them
| produced a notice that one of my anti-malware programs had blocked access to
| JSP.DRIVECLEANER.COM, a known malware site.
|
| I ran a scan of my system with the latest version of Webroot Spy Sweeper
| and Ad-Aware 2007, neither of which found anything. I also searched my
| registry, but didn't find anything. Can anyone please tell me what I've got
| on my system that is doing this, and how to get rid of it? Thanks!
|


Download and execute HiJack This! (HJT)
http://www.spywareinfo.com/~merijn/files/HijackThis.exe

Create a HJT log file and post it in one of the below locations...

{ Please - Do NOT post the HJT Log here ! }

Forums where you can get expert advice for HiJack This! (HJT) logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/...splay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malwa..._Here-f37.html
http://gladiator-antivirus.com/forum...?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/...p?showforum=18
http://www.malwarebytes.org/forums/i...hp?showforum=7
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm