squatter on my system

burningodzilla
10-08-2001, 07:18 AM
this is blowing my mind. i don't know if there's some virus or just some goofy little app hiding in my system, but this is wierd. a month or so ago i installed cain (for those who know what that is), my AV removed it; recognized as a threat, so i disabled it while i was playin w/ cain. while it was running, at no reasonable time, an icon appeared in the systray right by the clock. the icon was a pic of the jester girl, harley quinn from batman. i was curious so i went to click on it and as soon as my mouse went over, it slid away behind the clock!! ***!? i tore my system apart searhcing for this little app with no success; believe me when i say that i searched the lesser known areas (of course i'm sure there's plenty i don't know about). anyway, i have since updated my AV, scanned for trojans, and everything numerous times. my system seems clean. today at approx 9 am est, there it was again! i, like a retard tried to click it and it was gone...that will not happen again. anyway seems harmless, but if any of you know anyhing about this i would appreciate some info

i just scanned my ports and i am serving HTTP on 1214 and God knows what on 1223...<P ID="edit"><FONT class="small"><EM>Edited by burningodzilla on 10/08/01 08:26 AM.</EM></FONT></P>

Yoda
10-08-2001, 08:07 AM
Have you looked at your startup programs using msconfig (start -&gt; run -&gt; msconfig) ?

<font color=green>Do or do not
There is no try</font color=green>

burningodzilla
10-08-2001, 09:25 AM
neat little util...not there however.

Keltus
10-08-2001, 10:13 AM
if you have spy++ it's really good for seeing what processes are running at that moment

I think it comes with one of the visual studio CD. if not, I can send it to you. it's not very big

"AAAHHHHHHH!!!! I can't stand this "junior contributor" title. Self esteem is going down....

burningodzilla
10-09-2001, 06:54 AM
actually i do have it and am looking right now. of the 3,000,000 processes that are going on, it's hard to tell if one could be it. again i don't even know if the app is present right now....it seems that it only manifests itself at certain intervals. when it surfaces again i'll be sure to use spy. thanks for the feedback all, any more is more than welcome

taj134
10-15-2001, 03:17 AM
i myself have cain,. however i have not encounted any AV problems, using Norton, updated yesterday didn't find anything, so i think either its something else or it might be infectd with cain, do you have a firewall running on your system? If not get Zone Alarm from http://www.zonelabs.com then if it is a trojan trying to hack your system you can stop it, and you can also find out where the program is located! Clever Piece of kit is that!

Toby

burningodzilla
10-15-2001, 09:18 AM
i'm on a network at work, all sharing a DSL connection to the net which is split by a router...i believe (correct me if i'm wrong) that the router is enough.

at any rate, if it's a trojan i certainly don't need a firewall to tell me, as i scan myself regularly (i'm not discrediting the need for firewalls, but my situation is much more contained).

thanks for all the feedback...ALL is welcome

Derek Stone
10-15-2001, 06:58 PM
A single router is hardly enough.
A better solution would be a DMZ (demilitarized zone).
With one router a packet's addresses could be forged and sent right by the router.
With a network setup between two routers the forged packet would not be forwarded past the second router.
Oh yeah, and if you use NAT then get a really good firewall and virus scanners on each computer.

Good Luck
-cl

EZ Archive Ads Plugin for vBulletin Copyright 2006 Computer Help Forum