# Im part of a botnet

**URL:** <https://forum.kirupa.com/t/im-part-of-a-botnet/247537>\
**Category:** Uncategorized\
**Created:** [December 25, 2007, 6:49pm UTC](https://forum.kirupa.com/t/im-part-of-a-botnet/247537 "2007-12-25T18:49:22Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![mlk](https://avatars.discourse-cdn.com/v4/letter/m/e56c9b/32.png) [@mlk](https://forum.kirupa.com/u/mlk)\
**Post date:** [December 25, 2007, 6:49pm UTC](https://forum.kirupa.com/t/im-part-of-a-botnet/247537/1 "2007-12-25T18:49:22Z")

</div>

hello there

I was using wireshark to sniff around my wifi traffic and I noticed my computer was sending/receiving weird traffic

> 

HTTP/1.1 200 OK  
Content-Length: 13  
Content-Type: text/plain  
Last-Modified: Tue, 25 Dec 2007 16:43:32 GMT  
Accept-Ranges: bytes  
ETag: W/“decbd2481547c81:30d3”  
Server: Microsoft-IIS/6.0  
X-Powered-By: PleskWin  
MicrosoftOfficeWebServer: 5.0\_Pub  
X-Powered-By: [ASP.NET](http://ASP.NET)  
Date: Tue, 25 Dec 2007 18:24:44 GMT

74.52.229.131  
GET /gokhan/ip.txt HTTP/1.1  
User-Agent: API-Guide test program  
Host: [www.ramadacanta.com](http://www.ramadacanta.com)  
Cache-Control: no-cache

I went on [www.ramadacanta.com/gokhan/ip.txt](http://www.ramadacanta.com/gokhan/ip.txt) and it just shows an IP address - I take it the one ‘controlling’ my computer. I’m usually a careful internet user and rarely install non-trusted software.

Short of formatting my computer (which I will do eventually) does anyone know how I could get rid of trojans manually ? (Adware/Avast/Spybot don’t show any trojan)

I was thinking of modifying my ‘hosts’ file (winxp file for blocking certain ip addresses from my computer) to forbid ‘74.52.229.131’, but this seems a little weak.

Any help appreciated

mlk