1. 

   wmquincy Private E-2

   Had to rename firefox.exe to catch "winterpri.exe" which a byte comparison proved to be "ali.exe". I just reinstalled windows to remove it, because I do that annually any way. My question is, does anyone know how I can now get the IP address of the bandook client(should have got it before, but didn't figure I needed it). Probably too late. Would the connection go through avg? Thanks.

    

   wmquincy, Dec 26, 2008

   #1
2. 

   chaslang MajorGeeks Admin - Master Malware Expert Staff Member

   Welcome to Major Geeks!
   
   

   Why do you want this IP address? You just reinstalled your PC to get rid of Bandook.
   
   
   

   Are you referring to AVG's firewall? Bandook is designed to bypass firewalls.

    

   chaslang, Dec 29, 2008

   #2

Your name or email address:

Do you already have an account?

• No, create an account now.
• Yes, my password is:
• Forgot your password?

Stay logged in

---

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds

---