hello there
I was using wireshark to sniff around my wifi traffic and I noticed my computer was sending/receiving weird traffic
HTTP/1.1 200 OK
Content-Length: 13
Content-Type: text/plain
Last-Modified: Tue, 25 Dec 2007 16:43:32 GMT
Accept-Ranges: bytes
ETag: W/“decbd2481547c81:30d3”
Server: Microsoft-IIS/6.0
X-Powered-By: PleskWin
MicrosoftOfficeWebServer: 5.0_Pub
X-Powered-By: ASP.NET
Date: Tue, 25 Dec 2007 18:24:44 GMT
74.52.229.131
GET /gokhan/ip.txt HTTP/1.1
User-Agent: API-Guide test program
Host: www.ramadacanta.com
Cache-Control: no-cache
I went on www.ramadacanta.com/gokhan/ip.txt and it just shows an IP address - I take it the one ‘controlling’ my computer. I’m usually a careful internet user and rarely install non-trusted software.
Short of formatting my computer (which I will do eventually) does anyone know how I could get rid of trojans manually ? (Adware/Avast/Spybot don’t show any trojan)
I was thinking of modifying my ‘hosts’ file (winxp file for blocking certain ip addresses from my computer) to forbid ‘74.52.229.131’, but this seems a little weak.
Any help appreciated
mlk