I tried to slow down installs of all sorts of malware removers, as you kept suggesting me to keep trying, cause it often leaves orphan registry entries or files in my computer, & stopzilla is full of tools that hook explorer.exe, & takes forever, i uninstalled it as well, housecall was far enough. i decided to email iana, since i realized you were mixing up malware & attacks with classic network ip's that don't belong to any website, & got this answer: "18.104.22.168 resolves to "all-systems.mcast.net" It is not from the any web site, also it is not hacking attempt. It is from your ISP?s router. we say it as multicast. The router which from your ISP sends multicast packets to everybody has same IP range. It means that ?Is there any hosts(PC) that belong to multicast group??. Because the router should manage its ? routing table?. It sends same packets every 1min ( depends on configuration)." but if you still don't understand it, i'll keep emailing them & ask them advice.