Does this sound like a virus?

  • Thread starter Thread starter Ken Knecht
  • Start date Start date
K

Ken Knecht

Something on my system is sending out a single (that I'm aware
of) email shortly after I log on the net, sometimes later. I only
know because I see NAV scan it for viruses. It's not coming from
Eudora (I set the log to monitor sent bytes and commands and it
doesn't show, though my sent emails do). I'm using XP Home and
the Event log doesn't show email stuff. My Symantec 2003 firewall
lets it through. I scanned the system with a freshly updated
Spybot and NAV and nothing turned up.

Is there a way I can have NAV and/or the firewall keep track of
the outgoing emails it scans or, better yet, verify them with me?

If I don't get anything here I think I'll turn off the Symantec
firewall and try Tiny Personal Firewall tomorrow.

TIA

Ken
 
Not too sure. I know my version of NAV doesn't confirm outgoing mails
that's for sure. Maybe it's just the O/S sending something back to
Microsoft. I know that XP send "support" information of the system back to
Microsoft (long story).
You've got Spybot set up so if Gators' on your comp then you should know
about it.

Hmmmm..... weird.

Sorry, not much here.

All the best,

Ka.
 
Thanks much. I don't think it's XP because I've had it installed
for two years and this email problem only just started. Never
know though. If there's nothing for me on the Symantec newsgroup
I'm going to install Tiny Personal Firewall and turn off Symantec
2003 firewall - it's to difficult to configure and blocks my LAN.

Ken
 
Worst case is if you've got a jilted lover trying to track your keystrokes,
in which case my hat's off, you've got a Fatal attraction on your hands,
just stay away from ice picks (only kidding).
With firewalls, I tend to keep it simple. The firewall should be a tool and
not a full time job.

All the best,

Ka.
 
Something on my system is sending out a single (that I'm aware
of) email shortly after I log on the net,
Click to expand...

Rest snipped.

I noticed this on my computer as well a short time ago, and I run 2000.

What I did was when the norton dialog popped up, I disconnected from the
net.

Can't remember what I did then, but I was able to see the contents of the
mailing. It was a description of my system as well as a screenshot (so he
probably got to see some "interesting" images). The mailing was to some
taiwanese (I think) but he was using some program using a dedicated smtp
stack. I even found the author of the smtp component, but he couldn't help
me since the program was available as source code and could be included
into anyones program as they saw fit.

I cannot offer any further help, but I was able to track down which program
was the culprit and erased it. It can't have been too difficult if I did
it, so have a go.

Best
Mal
 
Back
Top