Thread replies: 7
Thread images: 3
Thread images: 3
File: weird message.jpg (52KB, 799x599px) Image search:
[Google]
52KB, 799x599px
Hi /wsr/
Found an old hard drive with a copy of Vista on it, and this error message keeps popping up. It seems to appear every five minutes or so. I used who.is to look up who owns the IP, and it is owned by ripe.net
What is this? Any way to remove it? If you need a list of installed programs on this computer, just ask.
>>
File: odd search.jpg (48KB, 1259x769px) Image search:
[Google]
48KB, 1259x769px
Typing in the IP alone brings up this shady looking web search. Typing anything in just gives you promo content.
>>
download malwarebytes. theres a virus/malware/trojan on that drive.
>>
ah the harmless virus that brings you to shifty websites that will give you actual harmful shit.
>>
File: cmd_2016-11-18_20-01-32.png (14KB, 960x480px) Image search:
[Google]
14KB, 960x480px
>>221933
> it is owned by ripe.net
Just wanted to chime in, RIPE is the authority that hands IP ranges to ISPs in Europe. You need to go deeper. Though not of much use, this is one level deeper information, pic related. It's a German IP.
You definitely have a trojan/virus (whatever you want to call it) and like >>222049 said, download malwarebytes to get rid of it.
>>
>>222561
Also wanted to add. That weird looking string after the IP looks like it's base64 encoded. The virus is sending some information back to its master. Try running the string through a decoder like https://www.base64decode.org/ to see what exactly the virus is sending to its master.
>>
>>222561
Rogue killer portable is better in your case or even combofix with vista
Thread posts: 7
Thread images: 3
Thread images: 3