Strange IP address
-
In LightSquid I showing http traffic going to the following "ip addresses"
60 0.0.2.216 1 0 2.0 M 0.0%
61 0.0.0.90 1 0 2.0 M 0.0%
63 0.0.0.85This computer does have a history of malware infection, which is why i was investigating it.
Any ideas what I'm looking at?
-
By chance, if you go to c:\documents and settings\all users\application data (or users\public\application data) in a command prompt, and do a dir/ah do you see any weird hidden folders with numbers for names?
-
Yeah there was, I cleaned it out.
I'm just trying to figure out what it was trying to do.
-
I had the same infection on a computer yesterday. Kaspersky didn't detect it. I manually added it to quarantine.
I had tried to disinfect it the previous day. That's when the mouse started moving weirdly all by itself until I unplugged the network cable.