Hi Barry,
Do you know what malware if any is associated with this domain?
Thanks!
Hi, don't know if this helps, but anecdotely, each time the PC in question has connected to the site in the manner shown, a variant of what appears to be deepdive shows up on the PC as C:\program files\shared\lib.dll and has an addon in IE8 associated with it. I say "appears", because although norton detects it and fixes it, it is by "reputation" and not by "signature". Meaning, it recognizes the directory and file as being suspicous, but did not find anything wrong with the file itself. I do not yet know what's on the PC that causes it to connect to the site, but continue to try and find it. I would not be surprised if the mechanism was capable of loading other malware. As you can see though, it definitely connects to the clickscompile url. Also, I believe the clickscompile domain was recently registered in June of this year, so it is probably something new.
Topic: clickscompile and u.clickscompile (Read 6162 times)