Tom's Guide | Tom's Hardware | Tom's Games

Computing.Net > Forums > Security and Virus > something is trying to get out!

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

something is trying to get out!

Reply to Message Icon

Name: Deli
Date: October 24, 2002 at 17:02:41 Pacific
OS: Win Me
CPU/Ram: 64K
Comment:

I just got this alert from ZoneAlarm >>

The firewall has blocked Internet access to mediamgr.ugo.com (216.105.166.67) (HTTP) from your computer [TCP Flags: S].

User: unknown
Program: Internet Explorer
Time: 25/10/2002 00:39:48

.... I ran Adaware and cleaned out my cookies and temp files (before doing a defrag and ScanDisk) last night,and the only places I've been tonight are The Register, PopCap games and here (computing.net) ... I aint never seen this on my puter ... and this is the first time I got an alert like this. Anyone got any ideas what it is, and where the hell is it on my puter? I've run Adaware again, looked in *start* (misconfig) and cant find anything that I can associate with "mediamgr.ugo.com"

Oh, by the way, I looked for "mediamgr.ugo.com" via Google *cache* ... ummm, didnt like what I saw on the bottom browser so I got out of it before I was *re-directed*

Anyone got any notions about what this is and where I've picked it up?

Thanks in advance ;-)

Deli



Sponsored Link
Ads by Google

Response Number 1
Name: JD
Date: October 24, 2002 at 17:08:01 Pacific
Reply:

Try checking your Task List and look for WINSRVC running on your system...


0

Response Number 2
Name: Deli
Date: October 24, 2002 at 17:35:59 Pacific
Reply:

I checked; aint got WINSRVC ... is that good or bad?

I've run AdAware, found nothing, and tried "Serach" and the only things I come up with for *mediamgr* are 2 text files in Windows/temporary internet.

How do I find the exe that tried to get out and communicate with "mediamgr.ugo.com"?

(be kind and easy, Im still learning!) ;-)

Ty

Deli


0

Response Number 3
Name: Jim Beau
Date: October 24, 2002 at 17:36:32 Pacific
Reply:

Do you have Spybot search and destroy?It detects things that Adaware doesn't.I use it and the new version is very good!Check it out at lurkhere.com under "nice files".It's free and is updated frequently.It may help cuz it detects spyware and lots of other stuff,dialers,keyloggers,hijackers..Also,do you run any anti-trojan programs?If not try wilders.org for reviews and trial downloads.TDS-3,Trojan Hunter are available as trials.My somewhat educated guess..maybe one of those browser hijackings that are very hot lately.Hope this helps.JB


0

Response Number 4
Name: Deli
Date: October 24, 2002 at 17:47:03 Pacific
Reply:

OK ty, Im going for SpyBot now (I've got Swatit but it aint found anything) I'll post back with any news on this thread.

Deli


0

Response Number 5
Name: Norm
Date: October 24, 2002 at 17:48:47 Pacific
Reply:

Its the new ad image top of this site.
image.ugo.com/ads


0

Related Posts

See More



Response Number 6
Name: Deli
Date: October 24, 2002 at 18:16:42 Pacific
Reply:

Ok, I'm REALLY scared now! SpyBot found 97 (!!!) problems ... but I dont know what to tell it to get rid of! Some of it is for Internet Explorer *Data Source object exploit* ... which is a registry key, etc.

Do I just TRUST SpyBot? Help!

Deli



0

Response Number 7
Name: sue
Date: October 24, 2002 at 18:25:17 Pacific
Reply:

I don't know much about spybot, but I think that if I was going to do a major overhaul on my registry, I'd back it up first :))


0

Response Number 8
Name: Deli
Date: October 24, 2002 at 18:38:16 Pacific
Reply:

Lmao Sue! I thought to myself, hell, if this guy knew enough and cared enough to make SpyBot, then I'm gonna trust it, and I zapped the *fix the problem* button!

Most of the 97 things were to do with Backweb lite (When I calmed down I realised that Backweb comes already installed with Packard Bell puters ... I put it out of action ages ago, but SpyBot just did a better job! teehee)

Ok, thats me fixed, Ty guys, great job as usual! I'm forever grateful! ;-)

Deli



0

Response Number 9
Name: _brandon_
Date: October 25, 2002 at 08:33:37 Pacific
Reply:

I wouldn't delete everything you found of spybot. I would only delete the stuff in red(or most of it). some of the stuff in green is important in some way or another, and if you delete them, some things may not work right.


0

Response Number 10
Name: Deli
Date: October 25, 2002 at 10:47:07 Pacific
Reply:

Yup, you're right, thanks brandon ;-) I'll be careful from now on!

Thanks everyone!

Deli


0

Response Number 11
Name: Jim Beau
Date: October 25, 2002 at 15:03:36 Pacific
Reply:

Deli.It shouldn't matter much at all.Spybot has an automatic back up feature.The detected problems should be color-coded.There is an icon called "recovery" on the left side of the Spybot window.That is regarding "backups".If you sometime decide to get Back Web lite back or something else you fixed,you can use recovery.Did you update Spybot?There are a few "release" updates available.They take a while to download,but they are recommended.On-line tab gets you to update buttons.Info&license>credits gets you a link to support forum if you have questions or need assistance.Hope this helps you.JB


0

Response Number 12
Name: Deli
Date: October 25, 2002 at 17:11:11 Pacific
Reply:

Thank you Jim Beau, I shall update regularly.

This is what keeps me coming back to computing.net ... all the great people who take time out to help! Thanks all for your time and patience ;-)

You all ROCK!

Deli



0

Response Number 13
Name: wawadave
Date: October 26, 2002 at 11:47:54 Pacific
Reply:

spy bot can cause problems in m.e on some machines depending on whats installed for soft ware.


0

Sponsored Link
Ads by Google
Reply to Message Icon

attacks W32.Supova.Worm



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links
Ads by Google


Results for: something is trying to get out!
Just switched to Sygate! Some Q's www.computing.net/answers/security/just-switched-to-sygate-some-qs/12702.html

Someone is trying to hide his trace www.computing.net/answers/security/someone-is-trying-to-hide-his-trace/17056.html

remote system trying to access PC www.computing.net/answers/security/remote-system-trying-to-access-pc/16092.html