Computing.Net > Forums > Security and Virus > something is trying to get out!

something is trying to get out!

Reply to Message Icon

Original Message
Name: Deli
Date: October 24, 2002 at 17:02:41 Pacific
Subject: something is trying to get out!
OS: Win Me
CPU/Ram: 64K
Comment:

I just got this alert from ZoneAlarm >>

The firewall has blocked Internet access to mediamgr.ugo.com (216.105.166.67) (HTTP) from your computer [TCP Flags: S].

User: unknown
Program: Internet Explorer
Time: 25/10/2002 00:39:48

.... I ran Adaware and cleaned out my cookies and temp files (before doing a defrag and ScanDisk) last night,and the only places I've been tonight are The Register, PopCap games and here (computing.net) ... I aint never seen this on my puter ... and this is the first time I got an alert like this. Anyone got any ideas what it is, and where the hell is it on my puter? I've run Adaware again, looked in *start* (misconfig) and cant find anything that I can associate with "mediamgr.ugo.com"

Oh, by the way, I looked for "mediamgr.ugo.com" via Google *cache* ... ummm, didnt like what I saw on the bottom browser so I got out of it before I was *re-directed*

Anyone got any notions about what this is and where I've picked it up?

Thanks in advance ;-)

Deli


Report Offensive Message For Removal

Response Number 1
Name: JD
Date: October 24, 2002 at 17:08:01 Pacific
Subject: something is trying to get out!
Reply: (edit)

Try checking your Task List and look for WINSRVC running on your system...


Report Offensive Follow Up For Removal

Response Number 2
Name: Deli
Date: October 24, 2002 at 17:35:59 Pacific
Subject: something is trying to get out!
Reply: (edit)

I checked; aint got WINSRVC ... is that good or bad?

I've run AdAware, found nothing, and tried "Serach" and the only things I come up with for *mediamgr* are 2 text files in Windows/temporary internet.

How do I find the exe that tried to get out and communicate with "mediamgr.ugo.com"?

(be kind and easy, Im still learning!) ;-)

Ty

Deli


Report Offensive Follow Up For Removal

Response Number 3
Name: Jim Beau
Date: October 24, 2002 at 17:36:32 Pacific
Subject: something is trying to get out!
Reply: (edit)

Do you have Spybot search and destroy?It detects things that Adaware doesn't.I use it and the new version is very good!Check it out at lurkhere.com under "nice files".It's free and is updated frequently.It may help cuz it detects spyware and lots of other stuff,dialers,keyloggers,hijackers..Also,do you run any anti-trojan programs?If not try wilders.org for reviews and trial downloads.TDS-3,Trojan Hunter are available as trials.My somewhat educated guess..maybe one of those browser hijackings that are very hot lately.Hope this helps.JB


Report Offensive Follow Up For Removal

Response Number 4
Name: Deli
Date: October 24, 2002 at 17:47:03 Pacific
Subject: something is trying to get out!
Reply: (edit)

OK ty, Im going for SpyBot now (I've got Swatit but it aint found anything) I'll post back with any news on this thread.

Deli


Report Offensive Follow Up For Removal

Response Number 5
Name: Norm
Date: October 24, 2002 at 17:48:47 Pacific
Subject: something is trying to get out!
Reply: (edit)

Its the new ad image top of this site.
image.ugo.com/ads


Report Offensive Follow Up For Removal


Response Number 6
Name: Deli
Date: October 24, 2002 at 18:16:42 Pacific
Subject: something is trying to get out!
Reply: (edit)

Ok, I'm REALLY scared now! SpyBot found 97 (!!!) problems ... but I dont know what to tell it to get rid of! Some of it is for Internet Explorer *Data Source object exploit* ... which is a registry key, etc.

Do I just TRUST SpyBot? Help!

Deli



Report Offensive Follow Up For Removal

Response Number 7
Name: sue
Date: October 24, 2002 at 18:25:17 Pacific
Subject: something is trying to get out!
Reply: (edit)

I don't know much about spybot, but I think that if I was going to do a major overhaul on my registry, I'd back it up first :))


Report Offensive Follow Up For Removal

Response Number 8
Name: Deli
Date: October 24, 2002 at 18:38:16 Pacific
Subject: something is trying to get out!
Reply: (edit)

Lmao Sue! I thought to myself, hell, if this guy knew enough and cared enough to make SpyBot, then I'm gonna trust it, and I zapped the *fix the problem* button!

Most of the 97 things were to do with Backweb lite (When I calmed down I realised that Backweb comes already installed with Packard Bell puters ... I put it out of action ages ago, but SpyBot just did a better job! teehee)

Ok, thats me fixed, Ty guys, great job as usual! I'm forever grateful! ;-)

Deli



Report Offensive Follow Up For Removal

Response Number 9
Name: _brandon_
Date: October 25, 2002 at 08:33:37 Pacific
Subject: something is trying to get out!
Reply: (edit)

I wouldn't delete everything you found of spybot. I would only delete the stuff in red(or most of it). some of the stuff in green is important in some way or another, and if you delete them, some things may not work right.


Report Offensive Follow Up For Removal

Response Number 10
Name: Deli
Date: October 25, 2002 at 10:47:07 Pacific
Subject: something is trying to get out!
Reply: (edit)

Yup, you're right, thanks brandon ;-) I'll be careful from now on!

Thanks everyone!

Deli


Report Offensive Follow Up For Removal

Response Number 11
Name: Jim Beau
Date: October 25, 2002 at 15:03:36 Pacific
Subject: something is trying to get out!
Reply: (edit)

Deli.It shouldn't matter much at all.Spybot has an automatic back up feature.The detected problems should be color-coded.There is an icon called "recovery" on the left side of the Spybot window.That is regarding "backups".If you sometime decide to get Back Web lite back or something else you fixed,you can use recovery.Did you update Spybot?There are a few "release" updates available.They take a while to download,but they are recommended.On-line tab gets you to update buttons.Info&license>credits gets you a link to support forum if you have questions or need assistance.Hope this helps you.JB


Report Offensive Follow Up For Removal

Response Number 12
Name: Deli
Date: October 25, 2002 at 17:11:11 Pacific
Subject: something is trying to get out!
Reply: (edit)

Thank you Jim Beau, I shall update regularly.

This is what keeps me coming back to computing.net ... all the great people who take time out to help! Thanks all for your time and patience ;-)

You all ROCK!

Deli



Report Offensive Follow Up For Removal

Response Number 13
Name: wawadave
Date: October 26, 2002 at 11:47:54 Pacific
Subject: something is trying to get out!
Reply: (edit)

spy bot can cause problems in m.e on some machines depending on whats installed for soft ware.


Report Offensive Follow Up For Removal






Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: something is trying to get out!

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software