Can anybody help me?

Message boards : Number crunching : Can anybody help me?
Message board moderation

To post messages, you must log in.

AuthorMessage
Profile Chilean
Volunteer tester
Avatar

Send message
Joined: 6 Apr 03
Posts: 498
Credit: 3,200,504
RAC: 0
Chile
Message 724851 - Posted: 12 Mar 2008, 1:29:30 UTC
Last modified: 12 Mar 2008, 1:31:28 UTC

This isn't BOINC related, but I need programmers or someone equivalent to it.

Ok, I think I have a spyware, planted by somebody on my laptop, because I've been getting messages about some things i IM people to. and it's really creeping me out. Well, I think I found the culprit for keylogging my keys and taking screenshots of my PC and sending them to... whoever wants them. (I got a mail with personal info from somebody... like a stalker, it's really creepy) He/She got my cell phone number, plus personal info that I share with friends.
I deleted the application various times (I once caught the folder with a screenshot of my desktop...) but it kept coming back again...spy sweeper, ad-aware, or spybot would not detect it, as if it was homemade spyware.

Well, I need somebody that can open up the thing and disect the damn spyware or w/e it is...
I don't know forums that support this kind of request, so I came to SETI, cuz most of you guys know your computers (so do I, but not progrmamming).

If your willing to do this, respond and I'll post a link to the .zip file that cotains two .exes (regsvc32.exe and snhost.exe) plus two txt (dummy.txt and syslog.txt)

If you know a forum I can go to, then that would be great too. :)

HELP!

(i deleted windows, and installed ubuntu after receiving the mail. but... i would still like to dissect the app and find some IP address or something :/)
ID: 724851 · Report as offensive
Profile Uli
Volunteer tester
Avatar

Send message
Joined: 6 Feb 00
Posts: 10923
Credit: 5,996,015
RAC: 1
Germany
Message 724863 - Posted: 12 Mar 2008, 2:08:24 UTC

Go to Trendmicro.com and let it scan your system. I have been using it, since I got a bug at work in 2001 and nether Norton or what other program they used at the time caught it.
The price is right, FREE, you can't loose.
Pluto will always be a planet to me.

Seti Ambassador
Not to late to order an Anni Shirt
ID: 724863 · Report as offensive
Profile Chilean
Volunteer tester
Avatar

Send message
Joined: 6 Apr 03
Posts: 498
Credit: 3,200,504
RAC: 0
Chile
Message 724869 - Posted: 12 Mar 2008, 2:13:52 UTC

I think I got the culprit...

http://research.sunbelt-software.com/threatdisplay.aspx?name=SniperSpy&threatid=44040
ID: 724869 · Report as offensive
Profile Uli
Volunteer tester
Avatar

Send message
Joined: 6 Feb 00
Posts: 10923
Credit: 5,996,015
RAC: 1
Germany
Message 724874 - Posted: 12 Mar 2008, 2:19:34 UTC

You might try that site anyway, may it find more bugs. BTW they work with the FBI etc to help this kind of invasion.
Pluto will always be a planet to me.

Seti Ambassador
Not to late to order an Anni Shirt
ID: 724874 · Report as offensive
Profile Chilean
Volunteer tester
Avatar

Send message
Joined: 6 Apr 03
Posts: 498
Credit: 3,200,504
RAC: 0
Chile
Message 724876 - Posted: 12 Mar 2008, 2:22:19 UTC
Last modified: 12 Mar 2008, 2:23:49 UTC

Well, I got the little bug on my clean desktop in a zip file. i formated my laptop and installed Ubuntu in it. thanks for your help :)
ID: 724876 · Report as offensive
Profile Mr. Majestic
Volunteer tester
Avatar

Send message
Joined: 26 Nov 07
Posts: 4752
Credit: 258,845
RAC: 0
United States
Message 724879 - Posted: 12 Mar 2008, 2:24:59 UTC - in response to Message 724863.  

Go to Trendmicro.com and let it scan your system. I have been using it, since I got a bug at work in 2001 and nether Norton or what other program they used at the time caught it.
The price is right, FREE, you can't loose.

Seems to do a good job. neither this or Norton found anything so my computer must be clean.

ID: 724879 · Report as offensive
Profile Chilean
Volunteer tester
Avatar

Send message
Joined: 6 Apr 03
Posts: 498
Credit: 3,200,504
RAC: 0
Chile
Message 724885 - Posted: 12 Mar 2008, 2:33:46 UTC

no.. it didn't find anything >.<
idk why.
it was clearly a spyware, it took pics of my desktop... it keylogged, and whenever i deleted it, it came back.
ID: 724885 · Report as offensive
Profile popandbob
Volunteer tester

Send message
Joined: 19 Mar 05
Posts: 551
Credit: 4,673,015
RAC: 0
Canada
Message 724907 - Posted: 12 Mar 2008, 3:45:38 UTC - in response to Message 724885.  

no.. it didn't find anything >.<
idk why.
it was clearly a spyware, it took pics of my desktop... it keylogged, and whenever i deleted it, it came back.


try one of the zone alarm products... (anti-spyware, anti-virus, internet security)

~BoB


Do you Good Search for Seti@Home? http://www.goodsearch.com/?charityid=888957
Or Good Shop? http://www.goodshop.com/?charityid=888957
ID: 724907 · Report as offensive

Message boards : Number crunching : Can anybody help me?


 
©2024 University of California
 
SETI@home and Astropulse are funded by grants from the National Science Foundation, NASA, and donations from SETI@home volunteers. AstroPulse is funded in part by the NSF through grant AST-0307956.