frazzled
Nov 29 2006, 05:41 AM
Hi everyone...
I am new to this board....and I thank all of you for being here to help people like myself.
I am not real computer savvy......I am almost certain though that someone has been accessing my computer remotely......or gaining access to my files somehow. I have reformated my computer 3 times the past 2 weeks. The first time I did it....XP asked me for my certificate key#. The next 2 times it didn't.
I have these programs installed (and have had them installed!)....Symantec, Spybot, Adaware, & Spycop. I just installed CCleaned a few days ago. Nothing comes up on them re: Spyware. Although...everytime I make a setting on my computer...it changes. Also...I found a file named raim. Someone told me it could be Remote Aim. That would make sense....since the suspected person uses Aim. Right after I clicked the file to explore it......I went to my email and there was a message loading that had a worm. Norton blocked it.
Can someone please help me???? I am frazzled.... and at this point am paranoid of even using my computer. I need someones expert computer help to tell me if my computer is safe!!!
Thank you so much for your time.
JC
Tarq57
Nov 29 2006, 08:24 AM
[quote]I have reformated my computer 3 times the past 2 weeks. [/quote]
Why? Is it because you are concerned about "hackers", or some other reason?
[/quote]Although...everytime I make a setting on my computer...it changes[quote]
Can you give an example, or more than one, of the setting/s that have changed, and when, eg: after a restart., or after connecting to the net.
[/quote]Someone told me it could be Remote Aim. That would make sense....since the suspected person uses Aim.[quote]
So you have someone in mind. Millions of people use aim. Raim is a tool used to measure the integrity of gps signals. "someone told me" is a bit stab in the dark-y. Need to know the exact file name, particularly of any suffix, eg .exe (including exact punctuation), and where on the computer you found it, and was it as a result of a search, or were you just exploring the filing system and got curious, or something else?
[/quote] Right after I clicked the file to explore it......I went to my email and there was a message loading that had a worm. Norton blocked it[quote]
That's not too clear. Did clicking on the file cause your email program to open? Or if not, when you explored it what did you find?
Can you remember what the message had in it and what program issued it? I would assume Norton internet security might have done that, and if so, did it name the worm? Any idea who the sender was?Could be important.
Your security system: Is it up to date? And what is the name/function/s of it. Symantec make/have made quite a few applications. Do you have a firewall? If so, which one? Do you connect using dial up or cable? Is it connected all the time that the computer is switched on?
It sounds like you might possibly have some kind of unwanted program on the machine, and if it can be narrowed down a bit help will be forthcoming. Don't be too frazzled...a healthy level of background paranoia should be adequate. I'm not an expert at this sort of thing but have done quite a few cleanups and used quite a few different programs to do it. Most important, before doing anything else (and if you haven't done so already) is to make sure your security applications are up to date, and once that's done, use each in turn to scan the computer again. If that's already been done. skip it. There are other things you can download that will help.
(Edit) PS, I see youv'e posted this in two seperate threads. One thread is enough, in fact, one is required. Avoids confusion. But don't worry about that now, an admin will merge/lock the other one.
frazzled
Nov 29 2006, 05:43 PM
Hi Tarq..
Thank you for your reply. I am going to do a Hijack this log and post it on that board.
JC
XPSP2
Nov 30 2006, 03:48 PM
QUOTE(frazzled @ Nov 29 2006, 12:43 PM) [snapback]55908[/snapback]
Hi Tarq..
Thank you for your reply. I am going to do a Hijack this log and post it on that board.
JC
R-click "my Computer", click Properties, select the remote tab, check the box to have it selected then click the advanced button, in the new dialog box, deselect allowing remote control, click apply then/or Ok, deselect box on the remote tab, click apply then/and Ok.