Is this Spyware?

[Gary]

Everytime I connect to the internet, ZoneAlarm asks if it is OK for
iic**.exe to access the internet. I answer "no" and "remember answer". **
represents two alphanumerics. I do a file search for the file and find it.
The next time I connect, ZoneAlarm asks if it is OK for iic**.exe to access
but this time the ** have changed to different aplhanumerics. I do a file
search and find it but the previous iic**.exe with the previous
alphanumerics is gone. It has renamed itself. What is this?

[null@zilch.com]

On Fri, 12 Sep 2003 12:01:07 -0500, "Gary" <grnunn@bellsouth.net>
wrote:

>Everytime I connect to the internet, ZoneAlarm asks if it is OK for
>iic**.exe to access the internet. I answer "no" and "remember answer". **
>represents two alphanumerics. I do a file search for the file and find it.
>The next time I connect, ZoneAlarm asks if it is OK for iic**.exe to access
>but this time the ** have changed to different aplhanumerics. I do a file
>search and find it but the previous iic**.exe with the previous
>alphanumerics is gone. It has renamed itself. What is this?

Doesn't sound good does it? Typical of some Trojans. Have you
scanned your drive(s) with Spybot and AdAware? Also, a good up to date
antivirus scanner or two? If they find nothing you'll have to use
general methods. See my web site for KAV's Trojan_Finder. Look for
unusual registry entries and running processes. Check the other
startup axis items (ini files) as well.


Art
http://www.epix.net/~artnpeg