MalwareTeks Blog

Before proceeding with these removal instructions you will want to download all tools and print the instructions.

Download to your desktop FixIEDef

If you are connected via a router, download the User’s Guide for your router if you don’t have one on-hand.

Now disconnect your computer from the router and power off your router.  Next on the underside of the router should be a little red reset button that is slightly recessed.  Press and hold the reset button for a least 10 seconds.  This is going to reset the router to factory defaults.

Run FixIEDef (Instructions for use can be found at the FixIEDef Webpage)

Now let’s reset the DNS Settings for your computer:

1. Click Windows menu go to Start > Run (if you’re using Vista the search box).
2. Type “cmd”. (This will open the command console).
3. Type the following commands, exactly as shown, pressing the enter key after each command:
ipconfig /release
ipconfig /renew
exit

The command console will exit after the last command is entered.

Now reboot your computer.

Reconnect the router to the computer, turn it on and configure your router. This is where you need the User’s Guide for your router.

If for some reason this does not work, start a thread in the Malware Removal Forum, you must be a registered member of the site to post in the forums.

If you go to this web site, www.LetsSayThanks.com you can pick out a thank you card and Xerox will print it and it will be sent to a soldier that is currently serving in Iraq . You can’t pick out who gets it, but it will go to some member of the armed services. How AMAZING it would be if we could get everyone we know to send one!!! This is a great site.  Please send a card.  It is FREE and it only takes a second. Wouldn’t it be wonderful if the soldiers received a bunch of these? Whether you are for or against the war, our guys and gals over there need to know we are behind them.

ICANN (InternetCorporation for Assigned Names and Numbers) announced that ending the Registrar Accreditation Agreement (RAA) with EstDomains would go ahead as planned, despite the registrar’s appeal.

On 28 October 2008, ICANN sent a notice of termination to EstDomains, Inc. (EstDomains) based on an Estonian Court record reflecting the conviction of EstDomains’ then president, Vladimir Tsastsin, of credit card fraud, money laundering and document forgery.

ICANN received a response from EstDomains on 29 October in which it indicated that the Estonian Court record on which ICANN relied was not final and had been appealed. ICANN pended the termination of EstDomains’ RAA to analyze the claims made by EstDomains and to obtain independent information regarding the status of the alleged appeal.

On 7 November 2008, EstDomains was informed that, based on ICANN’s findings, ICANN was proceeding with the termination of EstDomains’ RAA, effective 24 November 2008.

EstDomains manages approximately 281,000 domain names.

Say goodbye to a large chuck on domains engaged in malware distribution.  That is the second victory over Cyber criminals in a period of less than a week.  First McColo has the plug pulled by it’s providers and now EstDomains will lose its accreditation.

Original notice of termination:
http://www.icann.org/correspondence/burnette-to-tsastsin-28oct08-en.pd f [PDF,77K]

EstDomains response to notice of termination:
http://www.icann.org/correspondence/poltev-to-burnette-29oct08-en.pdf  [PDF, 857K]

Letter to EstDomains concerning decision to proceed with termination:
http://www.icann.org/correspondence/burnette-to-poltev-07nov08-en.pdf  [PDF, 57K]

The volume of Internet Junk Mail plummets drastically when McColo Corp., a California based Hosting Company, has it’s access to the Internet cut-off by Internet Providers.

Experts claim that McColo Corp., based in San Jose, California, was responsible for coordinating roughly 75% of all spam sent daily.  On Tuesday, November 11th, e-mail security firm IronPort saw a drop of almost 2/3 of overall spam volume. While they were investigating what they thought might be a technical problem, it was discovered that a major spam network, McColo Corp., was shutdown.

Related Stories
Major Source of Online Scams and Spams Knocked Offline
Host of Internet Spam Groups is Cut Off
Spam Volumes Drop by Two-Thirds After Firm Goes Offline