GET /lm/imp_rxt.asp spyware

GET /lm/imp_rxt.asp spyware
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Computer Software Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
GET /lm/imp_rxt.asp spyware mik 10-26-2005
Posted by mik on October 26, 2005, 6:01 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


This seems to be a new spyware with no record over the Internet.
My son has installed it from Kazza today.

The browser seems to send information as it browses the Internet, with
url information to:
206.252.137.82 www.srch-results.com

I am researching the removal of this pest.
It is not LSP type of intrusion.

Do you have any idea regarding it?

No. Time Source Destination
Protocol Info
2687 32.139751 10.0.0.5 206.252.137.82 HTTP
GET /lm/imp_rxt.asp?si=19902&k=sip%20telephone HTTP/1.1

Hypertext Transfer Protocol
GET /lm/imp_rxt.asp?si=19902&k=sip%20telephone HTTP/1.1\r\n
Request Method: GET
Accept: */*\r\n
Accept-Language: en-us\r\n
Accept-Encoding: gzip, deflate\r\n
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)\r\n
Host: www.srch-results.com\r\n
Connection: Keep-Alive\r\n
Cookie: ASPSESSIONIDCAQBQSDC=BMLLDOGAMGPNDBAFNGOCADID;
ASPSESSIONIDSABTASSD=HKCILAPCCELEJAKGFIDJPMCG\r\n
\r\n



Posted by David H. Lipman on October 27, 2005, 2:19 am
If you were  Registered and logged in, you could reply and use other advanced thread options

|
| This seems to be a new spyware with no record over the Internet.
| My son has installed it from Kazza today.
|
| The browser seems to send information as it browses the Internet, with
| url information to:
| 206.252.137.82 www.srch-results.com
|
| I am researching the removal of this pest.
| It is not LSP type of intrusion.
|
| Do you have any idea regarding it?
|
| No. Time Source Destination
| Protocol Info
| 2687 32.139751 10.0.0.5 206.252.137.82 HTTP
| GET /lm/imp_rxt.asp?si=19902&k=sip%20telephone HTTP/1.1
|
| Hypertext Transfer Protocol
| GET /lm/imp_rxt.asp?si=19902&k=sip%20telephone HTTP/1.1\r\n
| Request Method: GET
| Accept: */*\r\n
| Accept-Language: en-us\r\n
| Accept-Encoding: gzip, deflate\r\n
| User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)\r\n
| Host: www.srch-results.com\r\n
| Connection: Keep-Alive\r\n
| Cookie: ASPSESSIONIDCAQBQSDC=BMLLDOGAMGPNDBAFNGOCADID;
| ASPSESSIONIDSABTASSD=HKCILAPCCELEJAKGFIDJPMCG\r\n
| \r\n

You can't go by what the adware/spyware connects to. You need the software that
makes the
connection to make a determination of what the malware is.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm




Posted by Donnie on October 28, 2005, 1:50 am
If you were  Registered and logged in, you could reply and use other advanced thread options

>
>
> This seems to be a new spyware with no record over the Internet.
> My son has installed it from Kazza today.
>
> The browser seems to send information as it browses the Internet, with
> url information to:
> 206.252.137.82 www.srch-results.com
>
##################################
Go to that URL and scroll to the bottom. Click on uninstall instructions. It
will take you to
http://www.srch-results.com/hyperlink_uninstall/uninstall.asp
donnie.




Posted by mik on October 30, 2005, 6:07 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Thanks Donnie!



Similar ThreadsPosted
The Difference Between Adware, Spyware and Anti-virus.(spyware blockers) April 4, 2008, 5:54 am
spyware.bearshare found by "Spyware Detector" October 27, 2007, 2:53 pm
Need Help With Pop Ups Spyware!!! July 9, 2005, 2:33 pm
spyware September 25, 2005, 11:36 pm
vx2.look2me spyware July 20, 2006, 4:23 pm
Spyware Removal? August 17, 2006, 2:29 pm
Best spyware program? August 22, 2006, 8:30 am
Re: Spyware question October 5, 2007, 7:54 pm
Re:Spyware-report: please, your advice May 29, 2005, 10:34 pm
Removing "PCTuneup" spyware? August 22, 2005, 8:29 pm

The site map in XML format XML site map

Contact Us | Privacy Policy