Windows file explorer trying to connect to us.2.cqcounter.com

[Dieter Tank]

Hi,

My firewall reports: "(explorer.exe) is trying to connect to
us.2.cqcounter.com[65.110.54.82] using port 80"

I cannot find a postal address on www.cqcounter.com web site.
Who/Where are they ?

How can I stop the windows file explorer connecting the web on its own
without telling me ?

No results from new Ad- Aware 6 beside tracking cookies.
No results from Trend Micro virus scan.
Spybot flags in red:
CoreMetrics: Tracking cookie (Internet Explorer: ADMIN) (Cookie,
fixed)
Advertising.com: Tracking cookie (Internet Explorer: ADMIN) (Cookie,
fixed)
Advertising.com: Tracking cookie (Internet Explorer: ADMIN) (Cookie,
fixed)
Avenue A, Inc.: Tracking cookie (Internet Explorer: ADMIN) (Cookie,
fixed)
DoubleClick: Tracking cookie (Internet Explorer: ADMIN) (Cookie,
fixed)
HitBox: Tracking cookie (Internet Explorer: ADMIN) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: ADMIN) (Cookie, fixed)
MediaPlex: Tracking cookie (Internet Explorer: ADMIN) (Cookie, fixed)
--- Spybot - Search && Destroy version: 1.3 ---

Any bells ringing for these addresses ?

Thanks for your help. Thanks Malke. I have done my homework but still
deeply disconcerted to see malware after so much
upgrading, web safe router, firewalls...

Dieter

 

[Frank Saunders, MS-MVP, IE/OE]

Eliminate any scumware.
CAUTION!!!!! Before you try to remove spyware using any of these programs ,
download a copy of LSPFIX from any of the following sites:
http://www.cexx.org/lspfix.htm
http://www.spychecker.com/program/winsockxpfix.html
(if your OS is Win2k or XP) The process of removing certain malware may kill
your internet connection. If this should occur, this program, LSPFIX, will
enable you to regain your connection.

See
Dealing with Unwanted Malware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm

Note that AdAware and SpyBot S & D will each catch some things the other
won't. Also, each needs to be updated with the program's update function
before every use, even when just downloaded. There's also a lot more to do
than just those two programs. CWShredder is also available here:
http://www.kellys-korner-xp.com/regs_edits/cwshredder.zip
**Post your HijackThis log to
http://forums.spywareinfo.com/ or the Spyware forum at
http://forum.aumha.org/ for expert analysis, not here.**
Alternative download pages for Ad-Aware, Spybot, HijackThis and CWShredder
may be found on this page:
http://aumha.org/a/parasite.htm.


See this link for information about malware:
http://arstechnica.com/articles/paedia/malware.ars

If nothing there helps, please post back to this thread.

--
Frank Saunders, MS-MVP, IE/OE
Please respond in Newsgroup. Do not send email
http://www.fjsmjs.com
Protect your PC
http://www.microsoft.com/security/protect/

Hi,

My firewall reports: "(explorer.exe) is trying to connect to
us.2.cqcounter.com[65.110.54.82] using port 80"

I cannot find a postal address on www.cqcounter.com web site.
Who/Where are they ?

How can I stop the windows file explorer connecting the web on its own
without telling me ?

No results from new Ad- Aware 6 beside tracking cookies.
No results from Trend Micro virus scan.
Spybot flags in red:
CoreMetrics: Tracking cookie (Internet Explorer: ADMIN) (Cookie,
fixed)
Advertising.com: Tracking cookie (Internet Explorer: ADMIN) (Cookie,
fixed)
Advertising.com: Tracking cookie (Internet Explorer: ADMIN) (Cookie,
fixed)
Avenue A, Inc.: Tracking cookie (Internet Explorer: ADMIN) (Cookie,
fixed)
DoubleClick: Tracking cookie (Internet Explorer: ADMIN) (Cookie,
fixed)
HitBox: Tracking cookie (Internet Explorer: ADMIN) (Cookie, fixed)
HitBox: Tracking cookie (Internet Explorer: ADMIN) (Cookie, fixed)
MediaPlex: Tracking cookie (Internet Explorer: ADMIN) (Cookie, fixed)
--- Spybot - Search && Destroy version: 1.3 ---

Any bells ringing for these addresses ?

Thanks for your help. Thanks Malke. I have done my homework but still
deeply disconcerted to see malware after so much
upgrading, web safe router, firewalls...

Dieter