Programming Forums
User Name Password Register
 

RSS Feed
FORUM INDEX | TODAY'S POSTS | UNANSWERED THREADS | ADVANCED SEARCH

Reply
 
Thread Tools Display Modes
Old Mar 15th, 2006, 12:23 AM   #1
Sane
Programming Guru
 
Sane's Avatar
 
Join Date: Apr 2005
Location: Waterloo, Ontario
Posts: 1,885
Rep Power: 5 Sane will become famous soon enough
Send a message via MSN to Sane
Do I have a virus? I'm a little worried.

I can consider myself lucky, or not, depends if this is abnormal or not. But I usually don't run my webserver on this computer, and right now I am. And as I'm surfing my site, the console outputting all the logs is right next to my browser. And I notice something peculiar... every page I click, it shows a second log of a different IP on the EXACT SAME PAGE one to two seconds after. It looks almost as if someone is following me around on my website. And I'm the only IP this happens to.

Do I have some weird virus that follows me around on the internet? Could it be some glitch in CherryPy? Internet stalker? Key logger? rofls...


Edit: Two IPs started following me now. I ran both of them on a geo-locator (whois) and both said they couldn't be found. Those same IPs can be seen surfing my site in other places if I stop browsing for a short period of time.
Sane is online now   Reply With Quote
Old Mar 15th, 2006, 2:47 AM   #2
PPoA
Programmer
 
PPoA's Avatar
 
Join Date: Mar 2006
Location: Tennessee
Posts: 41
Rep Power: 0 PPoA is on a distinguished road
Kinda sounds like spyware to me.
PPoA is offline   Reply With Quote
Old Mar 15th, 2006, 9:03 AM   #3
Pizentios
Programming Guru
 
Pizentios's Avatar
 
Join Date: May 2004
Location: Brandon, Manitoba, Canada
Posts: 2,023
Rep Power: 7 Pizentios is on a distinguished road
Send a message via ICQ to Pizentios Send a message via MSN to Pizentios
the NSA!
__________________
Profanity is the one language that all programmers understand.

Check out my Blog <---updated Nov 30 2007!
Pizentios is offline   Reply With Quote
Old Mar 15th, 2006, 9:13 AM   #4
Polyphemus_
Expert Programmer
 
Polyphemus_'s Avatar
 
Join Date: Aug 2005
Location: Rotterdam, the Netherlands
Posts: 942
Rep Power: 4 Polyphemus_ is on a distinguished road
Have a look at msconfig and your services, and look if there's a process you don't trust. If so, check with Google if it is indeed not trustable. If it indeed is not, delete / uncheck / whatever it .
Polyphemus_ is offline   Reply With Quote
Old Mar 15th, 2006, 9:16 AM   #5
Arevos
Programming Guru
 
Arevos's Avatar
 
Join Date: Aug 2005
Location: England
Posts: 1,499
Rep Power: 5 Arevos is on a distinguished road
Can you post up the IP addresses?

It could also be your ISPs cache, perhaps. Is the IP address similar to yours?
Arevos is offline   Reply With Quote
Old Mar 15th, 2006, 10:03 AM   #6
DaWei
Resident Grouch
 
DaWei's Avatar
 
Join Date: Jun 2005
Posts: 6,453
Rep Power: 10 DaWei is on a distinguished road
I find Task List to be invaluable when I'm cleaning up other people's Windows machines. It's free to use. It is SO valuable to me that I decided they deserved payment for it and bought it. I also use AdAware, Spybot-Search and Destroy, HiJackThis, LSPFix, and other tools for problems ranging from common to really recalcitrant.
__________________
Abstraction doesn't make it impossible to write bad code; it makes it possible to write superior code.
Contributor's Corner: Grumpy on C++ Exceptions DaWei on Pointers
DaWei is offline   Reply With Quote
Old Mar 15th, 2006, 10:07 AM   #7
Sane
Programming Guru
 
Sane's Avatar
 
Join Date: Apr 2005
Location: Waterloo, Ontario
Posts: 1,885
Rep Power: 5 Sane will become famous soon enough
Send a message via MSN to Sane
It's still following me T_T

66.249.72.228 (it), 64.230.25.230 (mine)

Only different by two numbers on the first part, but I know that makes a huge difference. My friend in Florida has almost the exact same IP address as I do.

There's so much crap in this process list, let me try to list some:
hkcmd, WinCtlAd, BCMSMMSG, CCAPP, myAgtTry, SSMMGgr, TeaTimer, realsched, wdfmgr, alg, navapsvc, ccevtmgr, spbbcs, symlcsvc, SNDSrvc, CCSETMGR, MPFMntor, lsass, csrss, mrAgtSvc, smss, E_S00RP1.

I'm too lazy to check all those, so tell me if you see anything in particular. CCAPP is always taking up all my CPU Cycles, and it's not a system task. But when I try to kill the process it says "action denied" or something.
Sane is online now   Reply With Quote
Old Mar 15th, 2006, 10:19 AM   #8
DaWei
Resident Grouch
 
DaWei's Avatar
 
Join Date: Jun 2005
Posts: 6,453
Rep Power: 10 DaWei is on a distinguished road
ccapp and other things beginning with cc are Norton Antivirus and Internet safety stuff. ccapp is the primary module. If it's 'always' eating your cycles, you probably have something wrong. Realsched means you are letting RealPlayer sit down by your clock. Unless you're REALLY lazy, and one click means more to you than another click, it's silly to let things sit there in the background, even if they aren't taking many cycles. Personally, I don't see why WE should look up your tasks, though, since I gave you a really good link.
__________________
Abstraction doesn't make it impossible to write bad code; it makes it possible to write superior code.
Contributor's Corner: Grumpy on C++ Exceptions DaWei on Pointers
DaWei is offline   Reply With Quote
Old Mar 15th, 2006, 10:25 AM   #9
Polyphemus_
Expert Programmer
 
Polyphemus_'s Avatar
 
Join Date: Aug 2005
Location: Rotterdam, the Netherlands
Posts: 942
Rep Power: 4 Polyphemus_ is on a distinguished road
Quote:
Originally Posted by Sane
I'm too lazy to check all those, so tell me if you see anything in particular. CCAPP is always taking up all my CPU Cycles, and it's not a system task. But when I try to kill the process it says "action denied" or something.
That's one of the reason why I don't use Norton Antivirus anymore.
Polyphemus_ is offline   Reply With Quote
Old Mar 15th, 2006, 10:28 AM   #10
zorin
Hobbyist Programmer
 
Join Date: Apr 2005
Posts: 218
Rep Power: 4 zorin is on a distinguished road
Sane, I googled for some of the stuff that you mentioned. First off -

WinCtlAd = Adaware
SSMMGgr = Nothing on google about it
MPFMntor = Don't have a clue what it is, might be somthing to do with your anti-virus program though.

The rest looks fine but I would run an anti-virus through your system aswell as some adaware programs.
zorin is offline   Reply With Quote
Reply

Bookmarks

« Previous Thread in Forum | Next Thread in Forum »

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump




DaniWeb IT Discussion Community
All times are GMT -5. The time now is 7:55 PM.

Powered by vBulletin® Version 3.7.0, Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Copyright ©2007 DaniWeb® LLC