Invalid IP Address - Page 2

Goldensage1 · 03-30-2007, 05:56 PM

I just thought my problems may be because Combofix was run in normal mode. Okay I did what you asked. Now what?

Ried · 03-30-2007, 06:26 PM

You lost me here...what problems?

Goldensage1 · 03-30-2007, 10:55 PM

You know, that may be the reason I can't finish the /wow section of the scan. Okay now what do I do?

Ried · 03-31-2007, 10:50 AM

I see. We're not sure why it's having difficulty completing that section on your machine. If your system is working fine and you have no problems, then we're through here.

I understand you are hesitant to download and install programs to your system, but I would be remiss if I didn't provide you with the same protective information I provide everyone else. What you decide to do with this information is up to you.

Your logs are clean. If there aren't any more problems, please continue with these final instructions and helpful links:

Ensure Windows Auto Update is Enabled
*Go to Start>Run - type wuaucpl.cpl
*Tick on the checkbox - "Automatically download the updates, and install them on the schedule that I specify".
Click on "OK".

Create a new System Restore point
Click Start >> Run - type SYSDM.CPL & press Enter
* Select the System Restore Tab
* Tick on the checkbox - "Turn off System Restore on all drives"
Click Apply
* Then untick the same checkbox & click OK
This will prevent any reinfection from previous restore points.

To help protect your computer in the future I recommend that you get the following free programs if you do not already have them:

McAfee Site Advisor--free version. The folks there check out websites and based on their findings, rate it as Safe, Unknown, Caution, or Bad.

SpywareBlaster 3.5.1 to help prevent spyware from installing in the first place. Install & update SpywareBlaster with the latest definitions. After you have updated, click the button - enable protection for all unprotected items.

Spyware Guard to catch and block spyware before it can execute.

IE-SPYAD.EXE to block access to malicious websites so you cannot be redirected to them from an infected site or email. IE/Spyad places more than 4000 dubious websites and domains in the IE Restricted list. This severely impairs attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites. This is a self-extracting .ZIP file, save it to your desktop. Once downloaded, double-click on it to extract the files inside (default dir is C:\IE-SPYAD)

Now navigate to C:\ie-spyad. Double click to open it.
From within the folder, double-click install.bat
Select Option #2 - Install the new IE-SPYAD list, by typing 2
Then return to the main menu.
Select option #4 - Add the old porn sites domain, by typing 4

Update all these programs regularly. Without regular updates you will not be protected when new malicious programs are released.

In light of your recent issue, I'm sure you'd like to avoid any future infections. Please take a look at these well written articles:

PC Safety and Security--What Do I Need?

HOW DID I GET INFECTED IN THE FIRST PLACE? by Tony Klein
THE ANTI-SPYWARE TUTORIAL
MAKING INTERNET EXPLORER SAFER
Understanding and Using Firewalls

**Be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them.

-----------------------------------------------------

Follow the list above and the potential for infection will reduce dramatically.

Goldensage1 · 03-31-2007, 12:13 PM

Ok. Before you go, I would like to tell 2 two last things that has happened to my computer recently. Sometimes, after I go back from hibernation mode, There's a space between the 2nd line of icons from the 3rd line. I usually just move all the icons up a space, but there's alwyas an awkward space between the last line of icons and the bar on the bottom. Also, I have been experiencing problems with my interent connection and printer. My Internet receiver sometimes just disappears from the tray after recovering from hibernation. My printer also refuses to print black stuff.

Ried · 04-02-2007, 05:43 AM

Hi,

Those issues do not appear to be malware related. I would suggest posting those issues in the Windows XP section of this forum.

03-30-2007, 05:56 PM	#21 (permalink)
Goldensage1 Registered User Join Date: Mar 2007 Posts: 27 OS: XP	Re: Invalid IP Address I just thought my problems may be because Combofix was run in normal mode. Okay I did what you asked. Now what?

03-30-2007, 06:26 PM	#22 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 19,047 OS: WinXP and Vista	Re: Invalid IP Address You lost me here...what problems? __________________ Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Keep this site free for all. Please consider, donating "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

03-30-2007, 10:55 PM	#23 (permalink)
Goldensage1 Registered User Join Date: Mar 2007 Posts: 27 OS: XP	Re: Invalid IP Address You know, that may be the reason I can't finish the /wow section of the scan. Okay now what do I do?

03-31-2007, 10:50 AM	#24 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 19,047 OS: WinXP and Vista	Re: Invalid IP Address I see. We're not sure why it's having difficulty completing that section on your machine. If your system is working fine and you have no problems, then we're through here. I understand you are hesitant to download and install programs to your system, but I would be remiss if I didn't provide you with the same protective information I provide everyone else. What you decide to do with this information is up to you. Your logs are clean. If there aren't any more problems, please continue with these final instructions and helpful links: Ensure Windows Auto Update is Enabled Go to Start>Run* - type wuaucpl.cpl Tick on the checkbox - "Automatically download the updates, and install them on the schedule that I specify". Click on "OK". Create a new System Restore point* Click Start >> Run - type SYSDM.CPL & press Enter * Select the System Restore Tab * Tick on the checkbox - "Turn off System Restore on all drives" Click Apply * Then untick the same checkbox & click OK This will prevent any reinfection from previous restore points. To help protect your computer in the future I recommend that you get the following free programs if you do not already have them: McAfee Site Advisor--free version. The folks there check out websites and based on their findings, rate it as Safe, Unknown, Caution, or Bad. SpywareBlaster 3.5.1 to help prevent spyware from installing in the first place. Install & update SpywareBlaster with the latest definitions. After you have updated, click the button - enable protection for all unprotected items. Spyware Guard to catch and block spyware before it can execute. IE-SPYAD.EXE to block access to malicious websites so you cannot be redirected to them from an infected site or email. IE/Spyad places more than 4000 dubious websites and domains in the IE Restricted list. This severely impairs attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites. This is a self-extracting .ZIP file, save it to your desktop. Once downloaded, double-click on it to extract the files inside (default dir is C:\IE-SPYAD) Now navigate to C:\ie-spyad. Double click to open it. From within the folder, double-click install.bat Select Option #2 - Install the new IE-SPYAD list, by typing 2 Then return to the main menu. Select option #4 - Add the old porn sites domain, by typing 4 Update all these programs regularly. Without regular updates you will not be protected when new malicious programs are released. In light of your recent issue, I'm sure you'd like to avoid any future infections. Please take a look at these well written articles: PC Safety and Security--What Do I Need? HOW DID I GET INFECTED IN THE FIRST PLACE? by Tony Klein THE ANTI-SPYWARE TUTORIAL MAKING INTERNET EXPLORER SAFER Understanding and Using Firewalls Be very wary with any security software that is advertised in popups or in other ways. They are not only usually of no use, but often have malware in them. ----------------------------------------------------- Follow the list above and the potential for infection will reduce dramatically. __________________ Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Keep this site free for all. Please consider, donating** "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

03-31-2007, 12:13 PM	#25 (permalink)
Goldensage1 Registered User Join Date: Mar 2007 Posts: 27 OS: XP	Re: Invalid IP Address Ok. Before you go, I would like to tell 2 two last things that has happened to my computer recently. Sometimes, after I go back from hibernation mode, There's a space between the 2nd line of icons from the 3rd line. I usually just move all the icons up a space, but there's alwyas an awkward space between the last line of icons and the bar on the bottom. Also, I have been experiencing problems with my interent connection and printer. My Internet receiver sometimes just disappears from the tray after recovering from hibernation. My printer also refuses to print black stuff.

04-02-2007, 05:43 AM	#26 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 19,047 OS: WinXP and Vista	Re: Invalid IP Address Hi, Those issues do not appear to be malware related. I would suggest posting those issues in the Windows XP section of this forum. __________________ Proud Member of ASAP since 2005 Proud Member of UNITE since 2006 Keep this site free for all. Please consider, donating "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."