+- Sinisterly (https://sinister.ly)
+-- Forum: Computers (https://sinister.ly/Forum-Computers)
+--- Forum: Antivirus & Protection (https://sinister.ly/Forum-Antivirus-Protection)
+--- Thread: Part of a BotNet, how to get rid? (/Thread-Part-of-a-BotNet-how-to-get-rid)
Pages:
1
2
Part of a BotNet, how to get rid? - lux - 01-12-2013
I opened up wireshark, and saw this, and it looked rather botnet suspicious....
![[Image: EPnh2.png]](http://i.imgur.com/EPnh2.png)
How should I go about this?
RE: Part of a BotNet, how to get rid? - Charon - 01-12-2013
I'd run a virus scan, in safe mode and also run Malwarebytes.
If that doesn't help reply back here.
Good luck.
RE: Part of a BotNet, how to get rid? - Nohbdy - 01-12-2013
(01-12-2013, 12:13 PM)xLinear Wrote: I opened up wireshark, and saw this, and it looked rather botnet suspicious....
How should I go about this?
Uninstall google chrome?
EDIT: To clarify, the IP's in question belong to google.
RE: Part of a BotNet, how to get rid? - Bannedshee - 01-12-2013
(01-12-2013, 09:41 PM)Nohbdy Wrote:(01-12-2013, 12:13 PM)xLinear Wrote: I opened up wireshark, and saw this, and it looked rather botnet suspicious....
How should I go about this?
Uninstall google chrome?
EDIT: To clarify, the IP's in question belong to google.
Yeah pretty sure Nohbdy is right
I don't think you're part of a botnet, run a few virus scans just to be safe.
RE: Part of a BotNet, how to get rid? - w00t - 01-12-2013
Yeah, that's Chrome calling back home with data you don't know about.
RE: Part of a BotNet, how to get rid? - lux - 01-12-2013
I KNOW i have a keylogger now
wont let me delete the file, it just regenerates it, any tips?
RE: Part of a BotNet, how to get rid? - Oni - 01-13-2013
Moving this to the Antivirus & Protection section.
RE: Part of a BotNet, how to get rid? - 1nT0x!c@t3d - 04-17-2013
in vista / seven / 8
click on start and type in "resource monitor" when that screen pops up click on "network" look at the exes, where the exes are located and what ip they are calling out to
other tools are nirsoft
whatsinstartup
tcpview
curports
pretty sure they are all nirsoft.
anyway its really just that simple.
scan with hitmanpro. don't use it to remove anything, just have it tell you where the infections are
boot from a live cd,
and remove them.
RE: Part of a BotNet, how to get rid? - w00t - 04-17-2013
Those packets are still Google. You might be part of a botnet, but it's not that traffic.
RE: Part of a BotNet, how to get rid? - i0xIllusi0n - 04-18-2013
(04-17-2013, 10:26 PM)nada11 Wrote: Formatting your PC would def. solve the problem, just to be 100% sure
Don't be a dumbass, clearly that solves problems, everybody knows that. When somebody asks for help, it's with doing the least amount of damage to what you currently have.