Zeus no Virus and problem with email

Norton Security | Norton Internet Security
1

I've problem with the email that I can't send with the client. My client is Thunderbird. My system is windows 7 64 bit  and Norton Internet Security 2013. 

The problem is good write is:

The IP 77.72.198.154 is infected with spamware, most recently
detected at:

2013:07:23 ~21:30 UTC+/- 15 minutes (approximately 4 hours, 30 minutes ago)


It was detected via this IP connecting to a sinkhole

that traps command and control communication from infected

computers.


This IP has or is NAT’ing for a zeus BOT infection


Most of these trojans are involved with stealing personal

information (such as bank account or login information (ie:

passwords, account numbers etc)).  As such, you need to

eradicate the infection as soon as possible.


It will be one of the following scenarios:


    

  1. It’s a NAT firewall, in which case it is a NAT
    
in front of a machine that is infected with spam
    
sending spamware.
    2. 

  2. It’s directly infested with spam sending spamware.
    3. 



Most of these trojans are difficult to find with standard anti-virus

products.  You may need to resort to “wireshark”, or “snort” to find

these infections by their behavior “on the wire”.


Please see http://cbl.abuseat.org/lookup.cgi?ip=77.72.198.154 for further

and more detailed information.


I’ve removed the entry from the list.


It may take a few hours to propagate to the public nameservers.


WARNING: the CBL WILL relist this IP if the underlying issues are not

resolved, and the CBL detects the same thing again.


Other IP-based reputation lists are also listing your IP address:


http://www.barracudanetworks.com/reputation/?pr=1&ip=77.72.198.154Info: Barracuda (BRBL) blacklist
– Andy, CBL Team
 
 
I’ve tried to use the scan of Norton Internet Security 2013. I’ve use  Run Norton Power Eraser (NPE) and the Norton Bootable Recovery Tool, but  this programs found no virus.
I connect at the Internet with a WIFI system and the IP is always 77.72.198.154. I’ve contact the provider but they’ve for me no solution. How can I remove this problem? If did I delist the IP after some hours this is listed. Can I remove this problems?
Hoping in a reply.
Sincerelly yours,
Fabbris Pierluigi
 

2

I've problem with the email that I can't send with the client. My client is Thunderbird. My system is windows 7 64 bit  and Norton Internet Security 2013. 

The problem is good write is:

The IP 77.72.198.154 is infected with spamware, most recently
detected at:

2013:07:23 ~21:30 UTC+/- 15 minutes (approximately 4 hours, 30 minutes ago)


It was detected via this IP connecting to a sinkhole

that traps command and control communication from infected

computers.


This IP has or is NAT’ing for a zeus BOT infection


Most of these trojans are involved with stealing personal

information (such as bank account or login information (ie:

passwords, account numbers etc)).  As such, you need to

eradicate the infection as soon as possible.


It will be one of the following scenarios:


    

  1. It’s a NAT firewall, in which case it is a NAT
    
in front of a machine that is infected with spam
    
sending spamware.
    2. 

  2. It’s directly infested with spam sending spamware.
    3. 



Most of these trojans are difficult to find with standard anti-virus

products.  You may need to resort to “wireshark”, or “snort” to find

these infections by their behavior “on the wire”.


Please see http://cbl.abuseat.org/lookup.cgi?ip=77.72.198.154 for further

and more detailed information.


I’ve removed the entry from the list.


It may take a few hours to propagate to the public nameservers.


WARNING: the CBL WILL relist this IP if the underlying issues are not

resolved, and the CBL detects the same thing again.


Other IP-based reputation lists are also listing your IP address:


http://www.barracudanetworks.com/reputation/?pr=1&ip=77.72.198.154Info: Barracuda (BRBL) blacklist
– Andy, CBL Team
 
 
I’ve tried to use the scan of Norton Internet Security 2013. I’ve use  Run Norton Power Eraser (NPE) and the Norton Bootable Recovery Tool, but  this programs found no virus.
I connect at the Internet with a WIFI system and the IP is always 77.72.198.154. I’ve contact the provider but they’ve for me no solution. How can I remove this problem? If did I delist the IP after some hours this is listed. Can I remove this problems?
Hoping in a reply.
Sincerelly yours,
Fabbris Pierluigi
 

3

Thanks. I've sent in the group of malware the question.