Why I'm Banned EVERYDAY !

[miloudme]

The question is all in the title ! Why my host is banned everyday ,i don't care

Pourquoi mon host est il banni tous les jours ,je comprend pas

[-magnum-]

The question is all in the title ! Why my host is banned everyday ,i don't care

Pourquoi mon host est il banni tous les jours ,je comprend pas

tu n'est pas banni verifie ta connection peut etre mauvaise si tu est banni en te le fera savoir et+ tu peut pas ecrire ya rien ds ton dossier . salut mes respect

[plutonium239]

Hello
Try to change your browser , I had some prblms like yours before with IE , but since I'm using FireFox , all going well .
Opera , and google Chrome work fine as well.
Regards

[Sat-TV]

What kind of message do you see when you are "banned"?

Regards,
MainFrame

[miloudme]

i use firefox

i have this message :

Your host has been Banned for 24 hours!

[-magnum-]

tu as une mauvaise connection debit faible ca m'est arrivee . Essaye test de speed net pour verifie ta connection ou va dans un cyber et la tu verifie
salutations

[Sat-TV]

i use firefox

i have this message :

Your host has been Banned for 24 hours!

This is our security system active against http flood attacks.
You are most likely infected with a trojan which silently is attacking our server from your computer.

Try to scan your computer with the latest anti-virus software, if nothing is found try to check your computer for any unknown processes making http connections and consume cpu.

To see if your computer is making any http requests just open command prompt and type "netstat" (without the quotes).
Most likely you will find a hidden connection to our server (64-191-68-117.hostnoc.net)

p.s. if you found the program which is causing this could you send it to me as I can write a cleaner program for other people affected by this.

If you need any more assistence, just let me know.

Regards,
MainFrame

[Bouzi]

I also every day the same message (Your host has been banned for 24 hours!
I scanned my PC with Kaspersky antivirus software updated, but I found nothing.
That is what I can be with netstat ca ay help you can see a little clearer.
Proto Adresse locale Adresse distante Etat

ICP personne-5e89f2:1110 localhost:4080 CLOSE_WAIT
ICP personne-5e89f2-2548 localhost:2549 ESTABLISHED
ICP personne-5e89f2:2549 localhost:2548 ESTABLISHED
ICP personne-5e89f2:2550 localhost:2551 ESTABLISHED
ICP personne-5e89f2:2551 localhost:2550 ESTABLISHED

Regards

[miloudme]

the fact is i have fawri adsl and we haven't a static IP
the IP change all 12 hours

Is that the problem ?
because i have kaspersky full internet security and i don't care about a trojan or an hidden connection

for info i have 128 Kbps

[Sat-TV]

When you quickly reload this site you will see a warning with a timer.. When you quickly load this site too often you will see the message "Your host has been banned for 24 hours".
So if you see this warning, your computer must have been loading our webpage in the background without you knowing about it.

@ Bouzi, the netstat is only working when the virus is actually active and attacking.
Most likely when you start up your computer a trojan is loaded on startup which is rapidly loading our website. usually the program dies after a couple of minutes with a bufferoverflow, but possibly all of this is hidden from sight.
Because the virus is made by pioneer for and it's not well known it will most likely not be listed in any mayor anti-virus database thus making it hard to find with anti-virus software.
Maybe we can maken a secure connection in which I check your computer to see if I can find anything?

p.s. a live list of attackers can be views here: http://www.satsupreme.com/blacklist.txt so if your ip is listed there you are defenitly infected. The list is constantly refreshing adding new attackers and removing old once.

Regards,
Danny