Suspect Firewall Connections

Aarrestad

My firewall reports that Live Messenger and Internet Explorer are making suspect (at least to me) connections.

The messenger connections are always present, but IE7 only reports that connection when surfing. Heavy surfing causes IE7 to make a million (maybe not that much, but at least 15-20) connections to 007guard.com

I've googled 007guard and it seems to be a very suspect page. I've run Spybot, Malwarebytes and of course BitDefender, but none reports any threats.

And what about the by1msg**** connection?

Any ideas?

alexcrist

Hello Aarrestad,

Please download this tool: http://students.info.uaic.ro/~cristian.dra...r/avis/avis.zip

Un-zip that archive into an empty folder, and open avis.exe.

Then go to System information and make a complete system log using the settings from this screenshot:

http://students.info.uaic.ro/~cristian.dra...r/avis/avis.jpg

You will find the log on your desktop, named bd_sys_log.xml.zip. Upload that archive on a file-sharing server (like rapidshare) and send me the download link on PM. Please generate the log while IE7 and WLM are running and those connections appear in BitDefender.

Note: Please don't scan your system for malware with AVIS unless specifically told so.

Cris.