The Notebook Review forums were hosted by TechTarget, who shut down them down on January 31, 2022. This static read-only archive was pulled by NBR forum users between January 20 and January 31, 2022, in an effort to make sure that the valuable technical information that had been posted on the forums is preserved. For current discussions, many NBR forum users moved over to NotebookTalk.net after the shutdown.
Problems? See this thread at archive.org.

    Remote Trojans.

    Discussion in 'Windows OS and Software' started by ClockWorkBrain, Aug 3, 2006.

  1. ClockWorkBrain

    ClockWorkBrain Notebook Guru

    Reputations:
    0
    Messages:
    52
    Likes Received:
    0
    Trophy Points:
    15
    In my five years of owning my own computers i've had a whole 2 spyware and 1 virus, so this is a kinda new thing.

    If your antivirus pops up to a file on your machine then its obvious whats happening, but if it pops up to a file on the net, whats that mean exactly?
    Nod32 just popped up with two warnings, one seemingly at an IP address 'http://xx.xxx.xxx.xxx/pa/l11.exe' the other seemingly at a webaddress 'http://x.xxxxxxx.net/a412/ac_yb.php?m=0&b-779'. Does this just mean that these two 'things' just tried to get at my machine, or does it mean theres something already on my machine that these 'things' are trying to access, or something else?

    Do i need to be worryied, or does the fact that Nod32 delt with mean i'm ok?
     
    ClockWorkBrain, Aug 3, 2006
    #1
  2. mtrivs

    mtrivs Notebook Evangelist

    Reputations:
    40
    Messages:
    458
    Likes Received:
    0
    Trophy Points:
    30
    Well i think these were intrusions rather than spyware. I think it was someone/something on the net that was trying to get into your machine.
     
    mtrivs, Aug 3, 2006
    #2
  3. teamkillahilla

    teamkillahilla Notebook Evangelist

    Reputations:
    10
    Messages:
    381
    Likes Received:
    0
    Trophy Points:
    30
    one thing is sure... it's evil... EVIL!!!!
     
    teamkillahilla, Aug 3, 2006
    #3
  4. Pitabred

    Pitabred Linux geek con rat flail!

    Reputations:
    3,300
    Messages:
    7,115
    Likes Received:
    3
    Trophy Points:
    206
    It's probably something on your machine. You shouldn't get anything remote that can cause popups like that on your computer without it already being compromised. Do a full scan, or take it to someone who's good at that kinda stuff.
     
    Pitabred, Aug 3, 2006
    #4
  5. ClockWorkBrain

    ClockWorkBrain Notebook Guru

    Reputations:
    0
    Messages:
    52
    Likes Received:
    0
    Trophy Points:
    15
    Ran Nod32 Ad-Aware and Spybot S&D and found nothing, nothing unusual running in processes, and it was the IMON module that found it not the AMON which would mean i'm ok wouldnt it?
     
    ClockWorkBrain, Aug 3, 2006
    #5
  6. ttupa

    ttupa Tech Elitist NBR Reviewer

    Reputations:
    136
    Messages:
    1,150
    Likes Received:
    0
    Trophy Points:
    55
    If it was NOD that created the popup, then it was most likely an intrusion attempt. Especially if the address was external. If you found nothing with those scans, then you're probably in good shape.
     
    ttupa, Aug 3, 2006
    #6