Another Dodgy Program

[adrianallen99]

Neither Trend nor AVG pick anything up, but whenever I log onto the internet my computer tries to send email or thats what I am assuming because I get a message that the E-mail scanner is trying to connect. to 212.74.101.10

The emails it tries to send seem to bounce as it times out, when looking at the bounced email it is sending information from HSBC website that I was on earlier, basically it has just copied the pages and tried to email them. I am making the assumption that it is trying to get personal information.

I can't find anything on my PC and the virus software, firewall and Spyware software don't notice anything, but something isn't right.

Any advice on where to look for the program doing this?

Thanks

Adrian

 

[adrianallen99]

Hmm! Just noticed it is trying to send the email to [email protected]

 

[Trader333]

Adrian,

Try a different antivirus software, the one I particularly like is Antivir which can be downloaded FOC from here. I have found it better than AVG.


Paul

http://www.free-av.com/

 

[mutantcar]

Doesn't your firewall, or whatever is giving you the message tell you what program is doing it? The free zonealarm does this, you can then search for the program on your hard drive & delete it - not always as simple as that, but it's a start.

Can you see anything strange in your task list?

How about reporting to Tiscali? Aren't ISP's responsible in some way for this sort of activity?

 

[roguetrader]

Also you might want to google for free online anti-virus, you should get a few and run their scans.

Heres one to start, this also has a trojan scanner.

http://www.windowsecurity.com/

 

[adrianallen99]

Thanks, I will have a look at these.

 

[adrianallen99]

Tried Trend, AVG, AntiVir, McAfee and it finds nothing.

I know its a keylogger as in the email it shows stuff I typed, back spaces, etc.. and also when I have clicked the mouse.

Maybe I will try asking tiscali about the email account.

very annoying, any ideas?

 

[roguetrader]

http://www.kephyr.com/spywarescanner/library/glossary/keylogger.phtml

Might be helpful.

 

[adrianallen99]

Anyone know what this file is, I found it on my machine and also in the registry?? --> 98521779.exe
Removing it doesnt seem to make a difference to problem though.

 

[Kardinal]

This looks like a trojan... even if you delete the file, the system is already loaded and can recreate itself. I suggest you visit the microsoft website and download their latest BETA AntiSpyware tool. Although it is BETA release it so far has proved to be better then the current recommended tools (AdAware and SpySweeper).

 

[roguetrader]

Try asking about your problem here, it's free to register, some helpful and knowledgeable people on their board

http://www.techspot.com/index.html

 

[oatman]

WinPatrol will notify you of any unusual activity
http://www.winpatrol.com/

 

[Bluewave]

I'd add try running your arsenal of spyware/virus programs while in Safe Mode. The rogue file may be picked up as it probably won't have been loaded into memory.

 

[adrianallen99]

Thanks oatman Ill try winpatrol.

Anywhere here is the update so far. Microsofts Antispyware found 2 Trojan & 2 Browser Hijackers, which all the other virus checkers and spyware checkers had missed.

This still did no solve the problem, so I use a program called hijackthis.exe which discovered a further trojan which used the process winhlp32. I have cleared all of these and now my computer is showing as being clear from these programs. But it is continually trying to send the same email to [email protected], most or all of which are being bounced by my virus checker (although none contain a virus or anything other then text).

What is probably more concerning, is that using 5 different programs picked up 5 different problems, but not one picked up all the problems.

 

[DaveJB]

You might also try this
http://www.styopkin.com/keylogger_hunter.html
which is designed to stop keyloggers of this type.
Dave

 

[pinvest]

www.avast.com

Try the free one- I use the Pro version and have NEVER had a loss because of trojans, etc.

It also will scan for scripts, etc.

I use Zone Alarm Pro also.

good luck :cheesy:

 

[oatman]

Be careful with HijackThis as you can do serious damage. I suggest you go to PcPitstop and post your log. Expert readers can tell you what to take out.Go to Viruses,Spyware,Adware Forum and HijackThis Logs is at the top .Read the instructions before posting as it will save you time.

 

[roguetrader]

But it is continually trying to send the same email to [email protected],

Probably a complete waste of time, but have you tried contacting any abuse reporting resources at Tiscali to see if they can shed any light on that address.

 

[adrianallen99]

Probably a complete waste of time, but have you tried contacting any abuse reporting resources at Tiscali to see if they can shed any light on that address.

I have tried to contact them by phone, but was told I have to send an email, which I have done on a few occassions, but ive not even received anything back..