• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

need help with strange web site running in background...spyware?

Ecliptic

Golden Member
all you network experts out there, please help:

It seems that I have a a tcp connection established to a unfamiliar site, even after I close all my internet browsers. There is constant network activity to and from this site and I cant seem to stop it. It is listed as eyenblaster-vip1.eyeblaster.sjz.navisite.com. When I type this site into IE, it wont load and says I am unautherised to view. Is this spyware? Please help.
 
contact these folks.
http://www.navisite.com
It's hosted on their servers.

eyenblaster-vip1.eyeblaster.sjz.navisite.com resolves to 216.10.124.145

OrgName: Navisite, Inc.
OrgID: NAVE
Address: 400 Minuteman Road
City: Andover
StateProv: MA
PostalCode: 01810
Country: US

NetRange: 216.10.96.0 - 216.10.127.255
CIDR: 216.10.96.0/19
NetName: ARIN-NAVISITE-1BLK
NetHandle: NET-216-10-96-0-1
Parent: NET-216-0-0-0-0
NetType: Direct Allocation
NameServer: SJZEDNS001.NAVISITE.NET
NameServer: SJZEDNS002.NAVISITE.NET
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 1999-10-26
Updated: 2003-01-22

RTechHandle: ZN103-ARIN
RTechName: NaviSite
RTechPhone: +1-978-682-8300
RTechEmail: arin@navisite.com

OrgTechHandle: MKE2-ARIN
OrgTechName: Kelley, Mike
OrgTechPhone: +1-978-682-8300
OrgTechEmail: mkelley@navisite.com

# ARIN WHOIS database, last updated 2006-01-28 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
 
You need to do the usual maint: Windows updates, run anti-spyware software. Check the startup tab in msconfig and remove any unnecessary programs.
 
If it is Spyware and Navisite.com would take it of its hosting service, it would be nice for every one.

However your real problem is to find out what is running unauthorized on you computer and clean it up.

These two utilities might help you in the process, http://www.ezlan.net/infestation#process

:sun:
 
thanks for everyone's help. I have nortons antivirus, spybot, adaware, and a rootkit scanner... but you can never be too careful. I just restarted my computer and it is not there anymore.... probably a bad site i visited that ran something in the background. I'll still email navisite to find out what that link does.
 
Back
Top