some additional sites resolve to the same IP
http://hphosts.mysteryfcm.co.uk/?s=login.fric.cn
and it appears on a blocked sites list here
http://www.ifls.lib.wi.us/about/tech...kedspyware.asp
i'd say your first step is to set your firewall to block inbound and connections to fric.cn
rule of thumb...anytime you see unexpected connection to servers in china (.cn) russis (.ru) and a bunch more ...i'd assume you are compromised in one fashion or another...
i'd get http://www.sophos.com/products/free-...i-rootkit.html and run it..
and I'd be running anti spyware of your choice (i recommend blink from eEye..it has found stuff nothing else found...it's about 50 bucks but also prevents phishing, and -prevents- spyware, not just detecting and removing. Also protects against zero days
http://www.eeye.com/html/index.html




Reply With Quote