Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: vielle on March 27, 2013, 12:39:33 AM

Title: HELP im being attacked by these ips
Post by: vielle on March 27, 2013, 12:39:33 AM
So i met this person and he threates to STOP my connection and i dont know how avast can help stop it 199.47.114.215 (Look up IP)1274.226.114.67 (Look up IP)244.226.114.98 (Look up IP)1724.89.42.19 (Look up IP)164.227.116.183 (Look up IP)114.253.63.140 (Look up IP)94.131.74.231 (Look up IP)866.90.101.217 (Look up IP)84.253.63.158 (Look up IP)74.225.175.117 (Look up IP)64.225.170.174 (Look up IP)64.90.58.34 (Look up IP)5108.162.221.19 (Look up IP)54.253.58.171 (Look up IP)54.227.112.219 (Look up IP)44.225.172.157 (Look up IP)44.225.169.199 (Look up IP)4206.255.87.51 (Look up IP)34.227.116.195 (Look up IP)34.226.114.215 (Look up IP)24.227.117.71 (Look up IP)24.253.57.6 (Look up IP)24.227.108.32 (Look up IP)24.253.62.229 (Look up IP)24.227.113.210 (Look up IP)24.226.114.210 (Look up IP)2108.162.221.32 (Look up IP)14.225.174.144 (Look up IP)14.226.219.185 (Look up IP)14.253.62.21 (Look up IP)174.63.112.142 (Look up IP)1173.216.67.195 (Look up IP)14.253.57.219 (Look up IP)14.90.57.92 (Look up IP)14.226.219.45 (Look up IP)14.90.59.70 (Look up IP)14.227.118.142 (Look up IP)14.131.73.43 (Look up IP)


can someone please help me he shutted down nitrotype.com nitrotypeforums.com funtotype.com blog.typingweb.com and is now shutting me down!
Title: Re: HELP im being attacked by these ips
Post by: vielle on March 27, 2013, 12:41:59 AM
also he keeps shutting my connection down and i really need him to stop!
Title: Re: HELP im being attacked by these ips
Post by: Pondus on March 27, 2013, 12:51:37 AM
Quote
So i met this person and he threates to STOP my connection and i dont know how avast can help stop it
met who?...where?.....what did he do?....

more info....
Title: Re: HELP im being attacked by these ips
Post by: Pondus on March 27, 2013, 12:53:55 AM
Follow this guide and attach the logs...not copy and paste
http://forum.avast.com/index.php?topic=53253.0

AdwCleaner / Malwarebytes / OTL / aswMBR


the malware experts are in bed now, but will check your logs tomorrow

Title: Re: HELP im being attacked by these ips
Post by: vielle on March 27, 2013, 01:03:00 AM
on nitrotypeforums.com he DDOS ATTACKED the site which the ip was on and it is a site used by tons of users and also ddos attacked me and apparentely is attacking me by just knowing my ip and he said that he would attack me since i basically am good at hte game


Re: HAHA
Sent: Tue Mar 26, 2013 4:09 pm
by [VM] Relay™

I am letting you back online, that was just a test to show you that I am in power now.
Re: HAHA
Sent: Tue Mar 26, 2013 3:58 pm
by [VM] Relay™

Are you sure? I think I can "bro" I have your IP address, or atleast I am getting it, and you mess with me anymore I will shut down the nitrotype website
Re: HAHA
Sent: Tue Mar 26, 2013 3:55 pm
by ≾ℕɎ♍≿☠☯★Vielle★☯☠

[VM] Relay™ wrote:
≾ℕɎ♍≿☠☯★Vielle★☯☠ wrote:
[VM] Relay™ wrote:
Are you testing me? I could boot you offline you know

you cant and anonymous doesnt reveal themselves or else ill crack your entire group down and turn them into the police

Not, if I boot you offline

cant do that
Re: HAHA
Sent: Tue Mar 26, 2013 3:50 pm
by [VM] Relay™

≾ℕɎ♍≿☠☯★Vielle★☯☠ wrote:
[VM] Relay™ wrote:
Are you testing me? I could boot you offline you know

you cant and anonymous doesnt reveal themselves or else ill crack your entire group down and turn them into the police

Not, if I boot you offline
Re: HAHA
Sent: Tue Mar 26, 2013 2:00 pm
by ≾ℕɎ♍≿☠☯★Vielle★☯☠

[VM] Relay™ wrote:
Are you testing me? I could boot you offline you know

you cant and anonymous doesnt reveal themselves or else ill crack your entire group down and turn them into the police
HAHA
Sent: Tue Mar 26, 2013 1:10 pm
by [VM] Relay™

Are you testing me? I could boot you offline you know




Title: Re: HELP im being attacked by these ips
Post by: vielle on March 27, 2013, 01:51:35 AM
Heres the logs
Title: Re: HELP im being attacked by these ips
Post by: Pondus on March 27, 2013, 01:54:08 AM
also Malwarebytes quick scan and aswMBR

malware removers are notified, check back tomorrow

Title: Re: HELP im being attacked by these ips
Post by: vielle on March 27, 2013, 01:58:19 AM
not sure i posted on a forum and my ip changed registered as  108.162.215.66 when posting on nitrotypeforums.com
Title: Re: HELP im being attacked by these ips
Post by: essexboy on March 27, 2013, 03:15:28 PM
Could you attach the OTL extras please as I will need to see that.  Also could you disconnect/power off your router for 10 minutes, thereby gaining a fresh IP   

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
Code: [Select]
:OTL
IE - HKU\S-1-5-21-2039987242-3621593876-2557227755-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 177.69.8.237:3128
O37 - HKU\S-1-5-21-2039987242-3621593876-2557227755-1000\...exe [@ = P7O] -- "%1" %*
[2011/12/17 17:50:38 | 000,010,102 | -HS- | C] () -- C:\Users\BraNoah\AppData\Local\232645t4f581f661n688q6hfw7g8
[2011/12/17 17:50:38 | 000,010,102 | -HS- | C] () -- C:\ProgramData\232645t4f581f661n688q6hfw7g8

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
Title: Re: HELP im being attacked by these ips
Post by: vielle on March 27, 2013, 10:44:32 PM
is there a way i can report the ip that attacked me? i have lots of ips to report but how?
Title: Re: HELP im being attacked by these ips
Post by: polonus on March 27, 2013, 11:11:47 PM
Attack probably from an IP Cloud abuser, some Nebraskan gamer -> dragracer. Does that ring a bell?

polonus
Title: Re: HELP im being attacked by these ips
Post by: vielle on March 27, 2013, 11:14:55 PM
well he like attacked an cloudflare thingy but i thought he was in arkansas so how do u get his info and report him?
Title: Re: HELP im being attacked by these ips
Post by: vielle on March 27, 2013, 11:19:26 PM
Quote from: vielle on March 27, 2013, 11:14:55 PM
well he like attacked an cloudflare thingy but i thought he was in arkansas so how do u get his info and report him?
i dont know all these information or whether its correct or but he says he used to be in this call of duty group called faze and stuff  and he on skype his username is adam albert and he says hes a 14 year old and goes under a skype name as ziorelay
Title: Re: HELP im being attacked by these ips
Post by: vielle on March 28, 2013, 10:01:10 PM
anyone help :(
Title: Re: HELP im being attacked by these ips
Post by: DavidR on March 28, 2013, 10:07:35 PM
Essexboy is trying to help, comply with his last post Reply #8 above, run the OTL fix that he posted and then attach the OTL log.
Title: Re: HELP im being attacked by these ips
Post by: vielle on March 28, 2013, 10:57:49 PM
Quote from: essexboy on March 27, 2013, 03:15:28 PM
Could you attach the OTL extras please as I will need to see that.  Also could you disconnect/power off your router for 10 minutes, thereby gaining a fresh IP   

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
    (https://dl.dropbox.com/u/73555776/OTL_Fix.GIF)
    ooops the other post didnt send dont know why but here it is
Code: [Select]
:OTL
IE - HKU\S-1-5-21-2039987242-3621593876-2557227755-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 177.69.8.237:3128
O37 - HKU\S-1-5-21-2039987242-3621593876-2557227755-1000\...exe [@ = P7O] -- "%1" %*
[2011/12/17 17:50:38 | 000,010,102 | -HS- | C] () -- C:\Users\BraNoah\AppData\Local\232645t4f581f661n688q6hfw7g8
[2011/12/17 17:50:38 | 000,010,102 | -HS- | C] () -- C:\ProgramData\232645t4f581f661n688q6hfw7g8

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
Title: Re: HELP im being attacked by these ips
Post by: essexboy on March 28, 2013, 11:07:07 PM
Could you attach the extras log please as that will show any open ports
Title: Re: HELP im being attacked by these ips
Post by: vielle on March 28, 2013, 11:47:17 PM
what are those and how do i get them and can you explain me what they are?
Title: Re: HELP im being attacked by these ips
Post by: DavidR on March 28, 2013, 11:55:43 PM
It should be in the same location as the OTL logs were stored and is created on the first time you run OTL, look for or search for extras.txt.
Title: Re: HELP im being attacked by these ips
Post by: Pondus on March 28, 2013, 11:57:47 PM
Quote
and can you explain me what they are?
as the name say...extra tech info 
Title: Re: HELP im being attacked by these ips
Post by: vielle on March 28, 2013, 11:59:13 PM
Quote from: DavidR on March 28, 2013, 11:55:43 PM
It should be in the same location as the OTL logs were stored and is created on the first time you run OTL, look for or search for extras.txt.
this stuff?
Title: Re: HELP im being attacked by these ips
Post by: Pondus on March 29, 2013, 12:02:01 AM
nope
Title: Re: HELP im being attacked by these ips
Post by: vielle on March 29, 2013, 12:04:58 AM
Quote from: Pondus on March 29, 2013, 12:02:01 AM
nope
umm i cant find it i tried searching it and looking through all the folders
Title: Re: HELP im being attacked by these ips
Post by: essexboy on March 29, 2013, 03:23:33 PM
To recreate the  extra text run OTL with these settings