Programming Forums

Programming Forums (http://www.programmingforums.org/forumindex.php)
-   Coder's Corner Lounge (http://www.programmingforums.org/forum11.html)
-   -   Do I have a virus? I'm a little worried. (http://www.programmingforums.org/showthread.php?t=8872)

Sane Mar 15th, 2006 1:23 AM

Do I have a virus? I'm a little worried.
 
I can consider myself lucky, or not, depends if this is abnormal or not. But I usually don't run my webserver on this computer, and right now I am. And as I'm surfing my site, the console outputting all the logs is right next to my browser. And I notice something peculiar... every page I click, it shows a second log of a different IP on the EXACT SAME PAGE one to two seconds after. It looks almost as if someone is following me around on my website. And I'm the only IP this happens to.

Do I have some weird virus that follows me around on the internet? Could it be some glitch in CherryPy? Internet stalker? Key logger? rofls...


Edit: Two IPs started following me now. I ran both of them on a geo-locator (whois) and both said they couldn't be found. Those same IPs can be seen surfing my site in other places if I stop browsing for a short period of time.

PPoA Mar 15th, 2006 3:47 AM

Kinda sounds like spyware to me.

Pizentios Mar 15th, 2006 10:03 AM

the NSA!

Polyphemus_ Mar 15th, 2006 10:13 AM

Have a look at msconfig and your services, and look if there's a process you don't trust. If so, check with Google if it is indeed not trustable. If it indeed is not, delete / uncheck / whatever it :).

Arevos Mar 15th, 2006 10:16 AM

Can you post up the IP addresses?

It could also be your ISPs cache, perhaps. Is the IP address similar to yours?

DaWei Mar 15th, 2006 11:03 AM

I find Task List to be invaluable when I'm cleaning up other people's Windows machines. It's free to use. It is SO valuable to me that I decided they deserved payment for it and bought it. I also use AdAware, Spybot-Search and Destroy, HiJackThis, LSPFix, and other tools for problems ranging from common to really recalcitrant.

Sane Mar 15th, 2006 11:07 AM

It's still following me T_T

66.249.72.228 (it), 64.230.25.230 (mine)

Only different by two numbers on the first part, but I know that makes a huge difference. My friend in Florida has almost the exact same IP address as I do.

There's so much crap in this process list, let me try to list some:
hkcmd, WinCtlAd, BCMSMMSG, CCAPP, myAgtTry, SSMMGgr, TeaTimer, realsched, wdfmgr, alg, navapsvc, ccevtmgr, spbbcs, symlcsvc, SNDSrvc, CCSETMGR, MPFMntor, lsass, csrss, mrAgtSvc, smss, E_S00RP1.

I'm too lazy to check all those, so tell me if you see anything in particular. CCAPP is always taking up all my CPU Cycles, and it's not a system task. But when I try to kill the process it says "action denied" or something.

DaWei Mar 15th, 2006 11:19 AM

ccapp and other things beginning with cc are Norton Antivirus and Internet safety stuff. ccapp is the primary module. If it's 'always' eating your cycles, you probably have something wrong. Realsched means you are letting RealPlayer sit down by your clock. Unless you're REALLY lazy, and one click means more to you than another click, it's silly to let things sit there in the background, even if they aren't taking many cycles. Personally, I don't see why WE should look up your tasks, though, since I gave you a really good link.

Polyphemus_ Mar 15th, 2006 11:25 AM

Quote:

Originally Posted by Sane
I'm too lazy to check all those, so tell me if you see anything in particular. CCAPP is always taking up all my CPU Cycles, and it's not a system task. But when I try to kill the process it says "action denied" or something.

That's one of the reason why I don't use Norton Antivirus anymore.

zorin Mar 15th, 2006 11:28 AM

Sane, I googled for some of the stuff that you mentioned. First off -

WinCtlAd = Adaware
SSMMGgr = Nothing on google about it
MPFMntor = Don't have a clue what it is, might be somthing to do with your anti-virus program though.

The rest looks fine but I would run an anti-virus through your system aswell as some adaware programs.


All times are GMT -5. The time now is 5:11 AM.

Powered by vBulletin® Version 3.7.0, Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Copyright ©2007 DaniWeb® LLC