Forum Home
Press F1
 
Thread ID: 59462 2005-07-03 09:10:00 virus or spyware or what? Robby (3123) Press F1
Post ID Timestamp Content User
368925 2005-07-03 09:10:00 A friend running ME has started having this problem:

Everytime the computer is started, or restarted, a yellow square appears
in the top right hand corner of the screen and it dials out, waits for a couple of minutes, and then disconnects.

The square can be moved anywhere on the screen, by clicking and holding the left button down, but gives no indication of what it belongs to.

I have tried spybot, avg, and I hoped zonealarm might tell me at least what it is, but all these show no indication that is something incidious.

I havn't checked startup yet, but was hoping you kind folks, might have some idea what it is, any help appreciated,

cheers,

Robby
Robby (3123)
368926 2005-07-03 09:33:00 Right click on it and see what comes up. Might give a name you can then check out.

Does a dial up box appear? Are your details / phone number the same? Sounds like a rogue dialer. Check in zone alarm / programs see what's checked to access out. hth....m
mark c (247)
368927 2005-07-03 09:38:00 cheers Mark, right click givers nothing, dialer shows when dailing, will check zonealarm though, cheers Robby Robby (3123)
368928 2005-07-03 10:56:00 well you where on the right track to start with......check whats running at startup.

hijackthis may better as it may show up where the dailer etc is installed.
tweak'e (69)
368929 2005-07-03 17:33:00 I think one of the best rogue dialer preventers is Spybot . BUT . . you have to make sure that you have the advanced mode operating for you to make sure that somehow it isn't being ignored by Spybot .

What I mean is this: Spybot will get "turned off" sometimes in areas that many people don't know about . If you are running the advanced mode (at the top of Spybot, click MODE>>Advanced), then go to the "Ignored Products" area, either in the tree or the open window and see "ALL" products by wheeling or paging down thru them . You might be surprized to see some of the boxes have check marks in them . . . remove all check marks and then get the latest updates, immunization and THEN scan . Anything that is check marked will not be scanned, and will be left to run without any control or denial by Spybot .

Inspect this area from time to time . I find a check mark every so often . :confused:
SurferJoe46 (51)
368930 2005-07-03 22:04:00 cheers thanks very much everyone,

Robby
Robby (3123)
368931 2005-07-03 22:45:00 Have a look in Dialup Networking for ant 'dialup' connections
Do a complete search for dialer and see what comes up
And msconfig for unusual startup entries
bartsdadhomer (80)
1