This thread's last reply is from June 29, 2005, 3:36 AM UTC. Software, malware, and removal-tool
advice below may be out of date — treat specific steps and download links with caution.
I KNOW what ICQ is, but malware loves to hide as legitimate names.
I see no reason for icq.exe to have all these ports open:
1069, 3670, 1069 205.188.5.228:5190 ESTABLISHED, UDP MAIN:1039 *:* 1216
and 205.188.5.228
is whois'd to an AOL account, but why should that be happening?
ANYWAYS: please search and tell me the info of icq.exe
Thanks.
wng
OK, here it is (I hope that is what you meant)
Location: C:\Programs\Inet\ICQ\icq.exe
File Version: 5.5.6.3916
Company: ICQ Inc
Created: Wednesday, May 25, 2005, 6:12:25 PM
Modified: Tuesday, October 14, 2003, 1:03:50 PM
Accessed: Today, June 26, 2005, 6:47:53 PM
That should be it.... What's next?
sorry for the delay
google doesn't like the location ICQ is running from:
http://www.google.com/search?q=C:\Programs\Inet\ICQ\icq.exe
Do you know anything about this Inet?
edit: also, when did you install ICQ on your computer?
Yep, the location is quite normal. I install all my programs in the Programs folder, which then gets divided into Inet, Utilities, Image etc.. So the location is fine.
The date is OK as well - I recently reinstalled the whole system, including ICQ.
So I don't think my poor internet pager was hacked by the wicked virus.
ok. just checking
I dunno what's causing the prompts. If I were to guess, it would be kazza lite.
I will ask around... perhaps someone sees something I dont.
wng
Doubtful. I've been using Kazaa for a long time, never had a problem. And all this stuff started happenning right after I visited some sites looking for cracks - so it is a virus (or spyware), not a program, that causing all this to happen.
