196.215.150.100

richman

BANNED

Jan 8, 2009

321

312

• Feb 7, 2009

• #1

I got this ip number from my Kapersky antivirus netwok monitoring
This ip recorder send bit every hour

196.215.150.100

Anyone can explain me , what actually this ip ?

Whois Record

inetnum: 196.212.0.0 - 196.215.255.255
netname: TIS-20061026
descr: all abuse queries must be sent to
descr:
country: ZA
admin-c: ZT12-AFRINIC
tech-c: ZT12-AFRINIC
status: ASSIGNED PA
mnt-by: AFRINIC-HM-MNT
remarks: all abuse queries must be sent to
remarks:
source: AFRINIC # Filtered
parent: 196.0.0.0 - 196.255.255.255

person: IS Hostmaster
address: The Campus, 57 Sloane Street
address: Bryanston
address: Johannesburg
address: Gauteng
address: 2021
phone: +27(11) 5750550
fax-no: +27(11) 5760550
e-mail:
org: ORG-TIS1-AFRINIC
nic-hdl: ZT12-AFRINIC
source: AFRINIC # Filtered

​

 

S

smileplease

BANNED

Sep 29, 2008

241

160

• Feb 7, 2009

• #2

infected with a botnet.

if i'm right.

 

T

toyo

BANNED

Dec 20, 2008

1,010

506

• Feb 7, 2009

• #3

your computer is just calling home every now and then... not much of a problem, most of us depend on botnets for proxies, so your just doing your part right now

 

richman

BANNED

Jan 8, 2009

321

312

• Feb 7, 2009
• Thread Starter Thread Starter

• #4

what must I do ?

 

the_demon

Elite Member

Nov 23, 2008

3,220

1,604

• Feb 7, 2009

• #5

Code:

www.comodo.com

= Free firewall and anti virus 4 life... That's one of the apps I use.

 

richman

BANNED

Jan 8, 2009

321

312

• Feb 7, 2009
• Thread Starter Thread Starter

• #6

what is botnets effect ?
Is it very dangerous ?

 

Grizzy

Senior Member

Nov 11, 2008

920

1,005

• Feb 7, 2009

• #7

richman said:

what is botnets effect ?
Is it very dangerous ?

Click to expand...

Can be used for a lot of things, DoS attacks, spambots, click fraud, spamdexing, and of course, good ol' identity theft. Yes it can be very dangerous.

 

T

trifo13

Newbie

Jan 31, 2009

17

7

• Feb 7, 2009

• #8

Yes, its very dangerous... ur computer can be used as mule and they can use ur ip to hack/card and do other bad things, also they can steal all of your information.
I think, if its a good bot, the best way to remove it is unplug network, format and install of fresh OS.
Regards.

 

leonidt

Regular Member

Oct 11, 2008

235

215

• Feb 7, 2009

• #9

trifo13 said:

Yes, its very dangerous...
... unplug network, format and install of fresh OS.

Click to expand...

Yes. Format. Now. Your PC is calling it's master.

 

richman

BANNED

Jan 8, 2009

321

312

• Feb 7, 2009
• Thread Starter Thread Starter

• #10

I formated my last windows OS, but still found IP 196.215.105.100

anyone can explain me ?

 

D

Deleted member 23846

Guest

• Feb 7, 2009

• #11

you problay spreaded it to other computers connected to your network do you have more in your network?

 

4alllifestyles

Junior Member

Dec 3, 2008

170

98

• Feb 7, 2009

• #12

UDP Port 137 is Netbios Name Service...

196.215.105.100 is South Africa

I would run two or three different antivirus systems and clean all you can.

Then do a Hardware Format of your hard disk with the HD manufacturers downloadable tools. Might even do that twice. Wipe it totally clean (boot tracks, everything).

Then load the OS, and Apps from the ORIGINAL CD's

Then load clam anti-virus AND Comodo or AVG

And finally only bring over data from your backups that you can't live without. And only after you've used BOTH clam anti-virus AND Comodo or AVG to scan and make sure they're clean before bringing it over (and only if it's clean).

Yeah, I know it's a pain. But worth it if your botted.

 

S

smileplease

BANNED

Sep 29, 2008

241

160

• Feb 7, 2009

• #13

Format it.
Install a clean windows xp.

DO NOT INSTALL ANY PIRATED PROGRAMS

 

richman

BANNED

Jan 8, 2009

321

312

• Feb 7, 2009
• Thread Starter Thread Starter

• #14

I just formated it with new OS, but still get this trojan/virus

what antivirus can delete this ????

 

S

smileplease

BANNED

Sep 29, 2008

241

160

• Feb 7, 2009

• #15

did you buy the OS from the store?

 

Grizzy

Senior Member

Nov 11, 2008

920

1,005

• Feb 7, 2009

• #16

richman said:

I just formated it with new OS, but still get this trojan/virus

what antivirus can delete this ????

Click to expand...

Carefully and slowly follow the directions on this site:

hxxp*forums*majorgeeks*com/showthread.php?t=35407

Click to expand...

This is a great guide for removing malware.

 

richman

BANNED

Jan 8, 2009

321

312

• Feb 7, 2009
• Thread Starter Thread Starter

• #17

Thanks

 

T

toyo

BANNED

Dec 20, 2008

1,010

506

• Feb 7, 2009

• #18

nah..its a rootkit.. i had it..

the only thing that worked fr me is installing a different version of windows

time to look at vista

 

cooooookies

Senior Member

Oct 6, 2008

1,133

283

• Feb 7, 2009

• #19

richman said:

I formated my last windows OS, but still found IP 196.215.105.100

anyone can explain me ?

Click to expand...

stop stop stop. What BS in the comments above? If you reinstall your os freshly, this is completely sufficient and you don't have to scratch your harddisk with a screwdriver, provided that you did not reinstall your favorite blackhat tool from this forums download section.

Check first, if you have only incoming connections or also outgoing. In the first case, just setup correctly your firewall. Only when you have outgoing connections to that IP you have actually really to care.

Well this is just my first assumption, but you should give here more details (other computers in your net, directly connected to the internet or via a dsl-router, etc etc).

 

Grizzy

Senior Member

Nov 11, 2008

920

1,005

• Feb 7, 2009

• #20

How about installing some of these black hat programs in a virtualized environment and behind a firewall? Does anybody think that this would be safer?