Help

[Dave McDonald]

I believe that I have been infected by some kind of spyware. Some kind of
program is connecting to my computer via the LAN and port 139. I watched a
program in my task bar exit, but there was no indication something was
exiting, it just simply was there, and then was not (it was an IE page that
had been minimized to the task bar). I believe that someone is looking or
can look at the files my computer while I'm on it, but without my
knowledge - and the files I have open.

Does anyone one have any idea what program could be doing this? I have run
spybot, hijackthis, spysweeper, and X-cleaner. X-cleaner found a
"messenger" file running and asked if I wanted to keep it I said no (I do
not run any instant message programs), but I still see the connection from
within the LAN (10.0.0.12) on port 139. I have searched the web for spyware
/ remote control software and I'm not having very much luck.

Please help!

[-=ô;ö=-]

"Dave McDonald" <DaveMcD@comcast.net> wrote in message
news15yb.253737$9E1.1355504@attbi_s52...
| I believe that I have been infected by some kind of spyware. Some kind of
| program is connecting to my computer via the LAN and port 139. I watched a
| program in my task bar exit, but there was no indication something was
| exiting, it just simply was there, and then was not (it was an IE page that
| had been minimized to the task bar). I believe that someone is looking or
| can look at the files my computer while I'm on it, but without my
| knowledge - and the files I have open.
|
| Does anyone one have any idea what program could be doing this? I have run
| spybot, hijackthis, spysweeper, and X-cleaner. X-cleaner found a
| "messenger" file running and asked if I wanted to keep it I said no (I do
| not run any instant message programs), but I still see the connection from
| within the LAN (10.0.0.12) on port 139. I have searched the web for spyware
| / remote control software and I'm not having very much luck.
|
| Please help!
|
|

Sounds like maybe you may have a "trojan" running in the background or maybe hepldesk
software from your ISP(as came bundled in both Verizon and BellSouth's software)....

give this site a try for a trojan hunt..it is also free

http://www.trojanscan.com/trojanscan/trojanscan.htm

[Dave McDonald]

I ran Trojanhunter - no trojans were found on the system (I currently do not
have the infected system hooked up to the internet, in order to avoid any
message / info being sent to the spy).

I do have autocomplete turned on in IE. Some searches show info that I did
not put in. This leads me to believe that the spy can see and run my
programs in real time - more like remote control software. Is there such a
spyware (any) program out there? One that allows itself to be loaded onto
the unsuspecting machine (mine) and then everything - including program
launch and control - can be viewed by the spy.

Any help is much appreciated.

As a side - since I know the offending IP address, if I block it with
Sygate's personal firewall -will that stop the spy?

Thank you for your help...

"-=ô;ö=-" <Not.Telling@nowhere.com> wrote in message
news:bXayb.9069$a54.2956@nwrddc03.gnilink.net...
>
> "Dave McDonald" <DaveMcD@comcast.net> wrote in message
> news15yb.253737$9E1.1355504@attbi_s52...
> | I believe that I have been infected by some kind of spyware. Some kind
of
> | program is connecting to my computer via the LAN and port 139. I
watched a
> | program in my task bar exit, but there was no indication something was
> | exiting, it just simply was there, and then was not (it was an IE page
that
> | had been minimized to the task bar). I believe that someone is looking
or
> | can look at the files my computer while I'm on it, but without my
> | knowledge - and the files I have open.
> |
> | Does anyone one have any idea what program could be doing this? I have
run
> | spybot, hijackthis, spysweeper, and X-cleaner. X-cleaner found a
> | "messenger" file running and asked if I wanted to keep it I said no (I
do
> | not run any instant message programs), but I still see the connection
from
> | within the LAN (10.0.0.12) on port 139. I have searched the web for
spyware
> | / remote control software and I'm not having very much luck.
> |
> | Please help!
> |
> |
>
> Sounds like maybe you may have a "trojan" running in the background or
maybe hepldesk
> software from your ISP(as came bundled in both Verizon and BellSouth's
software)....
>
> give this site a try for a trojan hunt..it is also free
>
> http://www.trojanscan.com/trojanscan/trojanscan.htm
>
>