cancel
Showing results for 
Search instead for 
Did you mean: 

possible spyware ?

gpsmout
Grafter
Posts: 331
Thanks: 1
Registered: 09-10-2007

possible spyware ?

I recommend Zone Alarm, free download,

The run Trend Housecall, on line virus scanner.
download & Insatll if not installed already. teh following.

AVG antivirus,
Crap Cleaner
Spybot S& D
Adaware
Spyware Blaster.
Stinger from Macafee

Make sure you have all the latest versions.

Now disconnect from the net.. (physically)

Turn OFF system restore.
Reboot in Safe Mode

run each of the above programs individually in safe mode.
If nothing is found, you have no problems.

When you reboot normaly run them again.
Turn on system restore.

reconnect to internet.

See what happens!

navigate to Plus Nets portal and make sure email antivirus protection is enabled.

Good Luck

Graham Smout
20 REPLIES
vic_newey
Grafter
Posts: 802
Thanks: 2
Registered: 30-07-2007

possible spyware ?

I notice that the green data activity light on my modem is now indicating activity even when I don't have int .explorer onscreen .Strangely enough it was running just even tho I had not yet logged on to +net, how can this be ?
Looking thru task manager trying to find something different I notice csrss.exe which seems suspect I have run Adaware etc to no avail, any ideas please ?
I
Alecto
Grafter
Posts: 2,886
Registered: 30-07-2007

possible spyware ?

According to this
http://www.neuber.com/taskmanager/process/csrss.exe.html
It's a normal part of Windows, but it could be spyware depending on where it is.
I've not got one on my system though.
holdtight
Grafter
Posts: 1,634
Registered: 15-06-2007

possible spyware ?

As gpattison has pointed out it is part of the op system and should be kept running at all times

check to make sure its in your system32 folder where its meant to be
if you have two instances of it in that folder or its anywhere else in your system then it would be suspect
N/A

possible spyware ?

I would have thought the light would indicate any type of traffic, so if someone's machine was scanning for open ports, that might also register as traffic.

It's a long shot, I guess it depends on much it flickers.
vic_newey
Grafter
Posts: 802
Thanks: 2
Registered: 30-07-2007

possible spyware ?

it is in system 32 folder so presume its not this thats giving problem.

The modem is more or less in my view whenI am on the PC so I am certain that something is going on thats not normal
I think I will Google some of the other tasks & ee what comes up
N/A

possible spyware ?

Your firewall should be able to give you an indication of which programs etc. are accessing the internet, take a look and see if there is something you don't recognise.
Alecto
Grafter
Posts: 2,886
Registered: 30-07-2007

possible spyware ?

vicnewey
If you're not already familiar with it, then this
http://www.sysinfo.org/startuplist.php
gives you a list of legit startup items and what they do.
and this
http://www.pacs-portal.co.uk/startup_content.php#THE_PROGRAMS
goes on about viruses, trojans and stuff.
It might help.
N/A

possible spyware ?

Have you got MSN set to automatically connect?
N/A

possible spyware ?

I am seeing a lot of unsolicited data which causes the light to stay on. See

http://portal.plus.net/central/forums/viewtopic.php?t=26199
vic_newey
Grafter
Posts: 802
Thanks: 2
Registered: 30-07-2007

possible spyware ?

Bassil - it seems we have a similar problem altho my router (USB) turns off with the PC, also I do not have MSN or anything similar to auto logon . its constantly flickering now whilst I type & looks as tho I am downloading. Evil Evil
N/A

possible spyware ?

hi,in run type cmd or command,when the dos window opens type netstat then enter.this will show you all open connections to the net from your pc.if you have just started it up and as far as you are aware,you have no programs running and netstat shows open connections then something is defo running.
in task manager shut down anything that looks sus one at a time and keep trying netstat.if there is something there then a process of elimination will find it.
N/A

possible spyware ?

try these programs:
ccleaner
adaware
spybot s&d
run ccleaner first then the others. if you have spyware they will find it. it is perfectly normal for info to be moving back and forth some of the system process's will do that. also auto updates will do it. if you are really concerned then dnload and run hijackthis and you will be able to see what is running.
you will also find that if you have a normal modem and all pcs are switched off the light will continue to flicker.
N/A

Additional programs that can be used...

are:
Microsoft Antispyware Beta1, available from MS for free (for the time being) and McAfee Antyspyware 1.10, both of which are excellent.
vic_newey
Grafter
Posts: 802
Thanks: 2
Registered: 30-07-2007

possible spyware ?

I tried netstat as suggested by poiuyt & got this :-

Proto Local address Foreign Address State
TCP vic:1772 Localhost 1773 Established
TCP vic:1773 localhost 1772 Established
subsequent typings are all 1803 1804

does this look o.k. ? I only have +net onscreen