Warning: I installed/downloaded this from the OE factory using a key supplied from another member of this forum. Here is what I found using this software...
Beware/Caution: this software. After installing and running for about 5 days, it begins to "call back" to a Russian IP hosting company. RuWeb is Russian, and I am getting a strange RU Ip address showing up on my CurrPorts IP manager as "unknown". I have since uninstalled it using RevoUninstaller which monitored it's install in the first place, very handy software for getting rid of bad things on your computer.
This mal code is advanced, as it lays dormant for about 5 or 7 days and then begins to contact an "unknown" Russian IP when monitoring IP with CurrPorts. Also, it only sends out at odd intervals, so you might miss this RU IP entirely...I was lucky and just happened to notice it when it was sending to RU.
************
74.119.192.160
Location:
United States (US), North America
Region:
Nevada (NV)
City:
Las Vegas
ZIP:
89108
Hostname:
vela.deserv.net → 74.119.192.7
IP range:
74.119.192.0 - 74.119.195.255
ISP:
RuWeb Corp.
Organization:
Yellow Fiber Networks
*******
Can't say for certain that this is malicious, but would not want any of my keys being sent to Russia for any reason.
![[Image: zm50KVk.jpg]](http://i.imgur.com/zm50KVk.jpg)
