From iiu-admin@taint.org  Tue Aug  6 11:17:00 2002
Return-Path: <iiu-admin@taint.org>
Delivered-To: yyyy@localhost.netnoteinc.com
Received: from localhost (localhost [127.0.0.1])
	by phobos.labs.netnoteinc.com (Postfix) with ESMTP id 49CAB44122
	for <jm@localhost>; Tue,  6 Aug 2002 06:12:51 -0400 (EDT)
Received: from phobos [127.0.0.1]
	by localhost with IMAP (fetchmail-5.9.0)
	for jm@localhost (single-drop); Tue, 06 Aug 2002 11:12:51 +0100 (IST)
Received: from dogma.slashnull.org (localhost [127.0.0.1]) by
    dogma.slashnull.org (8.11.6/8.11.6) with ESMTP id g73L54v27400;
    Sat, 3 Aug 2002 22:05:04 +0100
Received: from web05.bigbiz.com (web05.bigbiz.com [216.218.198.5]) by
    dogma.slashnull.org (8.11.6/8.11.6) with ESMTP id g73L4tv27377 for
    <iiu@taint.org>; Sat, 3 Aug 2002 22:04:55 +0100
Received: from Alfalfa.deisedesign.com ([193.193.166.41]) by
    web05.bigbiz.com (8.8.7/8.8.7) with ESMTP id OAA29513 for <iiu@taint.org>;
    Sat, 3 Aug 2002 14:03:13 -0700
Message-Id: <5.1.0.14.0.20020803215948.02fd9340@127.0.0.1>
X-Sender: deisedesign/mwhelan/10.0.0.1@127.0.0.1
X-Mailer: QUALCOMM Windows Eudora Version 5.1
To: iiu@taint.org
From: Martin Whelan <mwhelan@deisedesign.com>
Subject: Re: [IIU] spyware calling home?
In-Reply-To: <005f01c23b2f$320fe780$c4e9869f@oemcomputer>
References: <5.1.0.14.0.20020803213144.02fd5860@127.0.0.1>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"; format=flowed
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by dogma.slashnull.org
    id g73L4tv27377
Sender: iiu-admin@taint.org
Errors-To: iiu-admin@taint.org
X-Beenthere: iiu@iiu.taint.org
X-Mailman-Version: 2.0.10
Precedence: bulk
Reply-To: iiu@taint.org
List-Unsubscribe: <http://iiu.taint.org/mailman/listinfo/iiu>,
    <mailto:iiu-request@iiu.taint.org?subject=unsubscribe>
List-Id: Irish Internet Users <iiu.iiu.taint.org>
List-Post: <mailto:iiu@iiu.taint.org>
List-Help: <mailto:iiu-request@iiu.taint.org?subject=help>
List-Subscribe: <http://iiu.taint.org/mailman/listinfo/iiu>,
    <mailto:iiu-request@iiu.taint.org?subject=subscribe>
List-Archive: <http://iiu.taint.org/pipermail/iiu/>
Date: Sat, 03 Aug 2002 22:01:17 +0100

It may be worth removing all your apps from the approved list. (a bit of a 
pain, I agree) then check the first app which makes the connection. With a 
bit of luck it won't be anything standard

At 21:47 03/08/02 +0100, you wrote:
>Unfortunately, I don't. ZoneAlarm normally gives that info but not this
>time. It just blocks the outward access and warns me that the attempt
>occurred.
>Brian
>----- Original Message -----
>From: "Martin Whelan" <mwhelan@deisedesign.com>
>To: <iiu@taint.org>
>Sent: Saturday, August 03, 2002 9:32 PM
>Subject: Re: [IIU] spyware calling home?
>
>
> > Do you know which app is making the connection?
> >
> >
> > At 20:18 03/08/02 +0100, you wrote:
> > >Hello all
> > >I'm looking for advice. My pc has developed a disturbing tendency of
>trying
> > >to access IP 62.17.143.253 without my consent. It has got to the stage
>where
> > >normal web-browsing is almost impossible.
> > >I have checked IP address on RIPE database and I know precisely who is
>being
> > >called. I contacted that company on 14 July, when the problem first arose
> > >and asked for a remedy but (surprise) got no reply.
> > >A helpful person on the ie.comp list suggested Adaware spyware removal. I
> > >ran this and haven't had a problem again until today.
> > >The offending program is obviously not in Adaware db. (I run adaware with
> > >current ref files every day now).?
> > >Any suggestions, please,  for removing whatever the f*** is causing this
> > >from my pc?
> > >Brian
> > >
> > >
> > >_______________________________________________
> > >IIU mailing list
> > >IIU@iiu.taint.org
> > >http://iiu.taint.org/mailman/listinfo/iiu
> >
> > ========================================================================
> > Martin Whelan | Déise Design | www.deisedesign.com | Tel : 086-8888975
> >
> > " Our core product Déiseditor © allows organisations to publish
>information
> > to their web site in a fast and cost effective manner. There is no need
>for
> > a full time web developer, as the site can be easily updated by the
> > organisations own staff.
> > Instant updates to keep site information fresh. Sites which are updated
> > regularly bring users back. Visit www.deisedesign.com/deiseditor.html for
>a
> > demonstration "
> >
> > Déiseditor © " Managing Your Information "
> > ========================================================================
> >
> > _______________________________________________
> > IIU mailing list
> > IIU@iiu.taint.org
> > http://iiu.taint.org/mailman/listinfo/iiu
> >
>
>_______________________________________________
>IIU mailing list
>IIU@iiu.taint.org
>http://iiu.taint.org/mailman/listinfo/iiu

========================================================================
Martin Whelan | Déise Design | www.deisedesign.com | Tel : 086-8888975

" Our core product Déiseditor © allows organisations to publish information 
to their web site in a fast and cost effective manner. There is no need for 
a full time web developer, as the site can be easily updated by the 
organisations own staff.
Instant updates to keep site information fresh. Sites which are updated 
regularly bring users back. Visit www.deisedesign.com/deiseditor.html for a 
demonstration "

Déiseditor © " Managing Your Information "
========================================================================

_______________________________________________
IIU mailing list
IIU@iiu.taint.org
http://iiu.taint.org/mailman/listinfo/iiu


