CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

[IN PROGRESS][CBL] 62.210.243.131

 
Post new topic   Reply to topic       All -> FavForums -> SecCheck [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
alfabreizad

Guest
IP: 62.210.*.*






PostPosted: Mon Nov 19, 2007 2:08 pm    Post subject: [CBL] 62.210.243.131
Reply with quote

I am writing from France, so I apologize in advance for any english mistake.
I am blacklisted for sending e-mails to my staff by one of my access provider: netbenefit.com because my ID is blacklisted by zen.spamhaus.org

I have checked my PC following your instructions:

http://sc.mynetwatchman.com/seccheck/SubmissionStatus.jsp?submissionID=3d3678d10cd165d390d6f883ec80bdbd

Travelling a lot and having several office locations in France I use my pC with several connexion means: securised office fixed access, mobile PC cards G3+

My PC is protected by Trend OffceScan regularly updated and windows defender

Can you help me for being cleaned from the blacklist?

Thank you and bonjour from France

Back to top
negster22

Security Expert
Premium Member

Joined: Mar 10, 2004
Posts: 5394

Moderators MVP Premium RootKit Detection Hosts Rootkit Experts Security Experts SRT

PostPosted: Mon Nov 19, 2007 7:05 pm    Post subject:
Reply with quote

Hello,

Your English is fine. Smile

I am assuming you sue the security box program for legitimate online banking?

Did you find any threats detected by your antivirus or any other security programs when conducting scans?

This file is suspect even though it received a clean billing by two AVs. It may be related to the Navipromo rootkit which is widespread in France.
C\windows\system32\jxzemodu.exe

Please upload it to Virus Total for analysis:
http://www.virustotal.com/

Also, to research that we will use a tool called Navilog1.

Please download Navilog1 by IL-MAFIOSO:
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.zip

  • Extract its contents to the desktop.
  • Double click on navilog1.exe to install it on your computer.
  • When the installation is complete, the tool will start automatically.
  • If it doesn't start automatically, please double click on Navilog1 shortcut on your desktop to run it.
  • Press E for English from the language Menu.
  • Type 1 in the next Menu to select Search and press Enter.
  • Wait for the Scan to finish (It may take a reasonable amount of time)
  • Press any key as requested .
  • A new document will be produced: fixnavi.txt.
  • Please copy/paste the contents of this report in your next reply.
The report is also saved in the root of the directory, "%SystemDrive%\fixnavi.txt". (usually C:\fixnavi.txt)


_________________
Negster22 - MS MVP - Consumer Security 2006-2008 image
Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> SecCheck All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer