Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Computer Security > GET /lm/imp_rxt.asp spyware

Reply
Thread Tools

GET /lm/imp_rxt.asp spyware

 
 
mik
Guest
Posts: n/a
 
      10-27-2005


This seems to be a new spyware with no record over the Internet.
My son has installed it from Kazza today.

The browser seems to send information as it browses the Internet, with
url information to:
206.252.137.82 www.srch-results.com

I am researching the removal of this pest.
It is not LSP type of intrusion.

Do you have any idea regarding it?

No. Time Source Destination
Protocol Info
2687 32.139751 10.0.0.5 206.252.137.82 HTTP
GET /lm/imp_rxt.asp?si=19902&k=sip%20telephone HTTP/1.1

Hypertext Transfer Protocol
GET /lm/imp_rxt.asp?si=19902&k=sip%20telephone HTTP/1.1\r\n
Request Method: GET
Accept: */*\r\n
Accept-Language: en-us\r\n
Accept-Encoding: gzip, deflate\r\n
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)\r\n
Host: www.srch-results.com\r\n
Connection: Keep-Alive\r\n
Cookie: ASPSESSIONIDCAQBQSDC=BMLLDOGAMGPNDBAFNGOCADID;
ASPSESSIONIDSABTASSD=HKCILAPCCELEJAKGFIDJPMCG\r\n
\r\n

 
Reply With Quote
 
 
 
 
David H. Lipman
Guest
Posts: n/a
 
      10-27-2005
From: "mik" <(E-Mail Removed)>

|
| This seems to be a new spyware with no record over the Internet.
| My son has installed it from Kazza today.
|
| The browser seems to send information as it browses the Internet, with
| url information to:
| 206.252.137.82 www.srch-results.com
|
| I am researching the removal of this pest.
| It is not LSP type of intrusion.
|
| Do you have any idea regarding it?
|
| No. Time Source Destination
| Protocol Info
| 2687 32.139751 10.0.0.5 206.252.137.82 HTTP
| GET /lm/imp_rxt.asp?si=19902&k=sip%20telephone HTTP/1.1
|
| Hypertext Transfer Protocol
| GET /lm/imp_rxt.asp?si=19902&k=sip%20telephone HTTP/1.1\r\n
| Request Method: GET
| Accept: */*\r\n
| Accept-Language: en-us\r\n
| Accept-Encoding: gzip, deflate\r\n
| User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)\r\n
| Host: www.srch-results.com\r\n
| Connection: Keep-Alive\r\n
| Cookie: ASPSESSIONIDCAQBQSDC=BMLLDOGAMGPNDBAFNGOCADID;
| ASPSESSIONIDSABTASSD=HKCILAPCCELEJAKGFIDJPMCG\r\n
| \r\n

You can't go by what the adware/spyware connects to. You need the software that makes the
connection to make a determination of what the malware is.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


 
Reply With Quote
 
 
 
 
Donnie
Guest
Posts: n/a
 
      10-28-2005

"mik" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
>
>
> This seems to be a new spyware with no record over the Internet.
> My son has installed it from Kazza today.
>
> The browser seems to send information as it browses the Internet, with
> url information to:
> 206.252.137.82 www.srch-results.com
>

##################################
Go to that URL and scroll to the bottom. Click on uninstall instructions. It
will take you to
http://www.srch-results.com/hyperlin.../uninstall.asp
donnie.


 
Reply With Quote
 
mik
Guest
Posts: n/a
 
      10-31-2005
Thanks Donnie!

 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Spyware guard 2008 removal guide! How to remove spyware-guard 2008manually dfinc Computer Security 1 01-23-2009 07:35 AM
spyware.bearshare found by "Spyware Detector" PeterOut Computer Security 18 11-14-2007 10:33 PM
spyware.bearshare found by "Spyware Detector" PeterOut Computer Support 21 11-13-2007 08:01 PM



Advertisments