I just noticed at the top "You last visited: Yesterday at 3:48 am " But i havnt been on here for the last 3 days. Is there any reason why that says that? Is it a bug or is someone accessing my accounts? People have accessed my accounts before and changed the password 3 times since. could this be a 1/1/07 bug or..? Rob
Are you sure? Probably you entered DP by accident? Just wait for Shawn,he has the logs. That's too bad,set a complex password would be better.
I have anti-virus, and i have a firewall and i have spyware protection. The only possible keylogger that i have on my computer is "WhatPulse" (www.whatpulse.org) which i have had on my computer for over a year now, and no anti-virus, spyware or firewall have detected it as a bad program. I did have sub7 trojen on here a few weeks ago (norton didnt detect it, but i found it in "netstat" on command prompt), but the second i found it, i downloaded a fix, and it is gone now. I am 100% sure that i havnt been on here. I have been at my uncles house in Tamworth near Birmingham, and he refused to let me "borrow" his connection for dial up. I am in birmingham now, and i am allowed to use the connection here because it is my nans temporary house. It now says the last time i visited was today, which is correct, i closed my browser by mistake earlier (dam). The last time i was online was on the 28-29th December. This is the first time i have noticed this problem, but it could have been going on for a long time as far as i know, because i am always closing my browsers by mistake, lol. Anyway, i will change my password right now, and i will check tomorrow to see if anyone has been on again, and if they have, then i will double check netstat in command prompt just in case the sub7 reformed itself, and if it has, then i will reformat before i do anything else internet based (which mean i will be offline for the next week or so, because my OS disk is 300 miles away at my home in cornwall). Thanks for the advise, and i will check the netstat thing now, sub7 runs on a port, and if that port has an address, then i an screwed again. Just in case you find something, i will post my network connection information here. http://www.auditmypc.com/port/tcp-port-1212.asp But it says that a virus has used the port in the past, but it doesnt mean that it is a virus, so i am unsure what to do, can someone please help me? can someone also tell me why nycvisit.com is in this list? i have never been on that site before, and it seems strange. Thanks for any help you can provide, i didnt notice that this problem was going to rebuild itself. Rob Edit: My IP is 194.153.25.173. Should be a part of 123-reg.co.uk
Couldn't it just be someone at home (accidentally) logged on on your behalf? Like if it's your homepage or something. Besides the AOL IP you normally use and the one you're on now, there's 2 more. One a Proxy and one from Belgium. I can't see timestamps on them. Just change your password to something secure.
What does this means? A proxy and one from Beligum. Maybe this belgium guy is using a proxy and using some method (either keylogger, trojan or whatever) he got your passwords.
It means someone from what looks to be a Belgian IP logged in under his name and someone via a Proxy logged in on his name. Whether or not those were authorised by him or who they were I can't tell.
And I am assuming that Proxy Guy was that Belgiun. He Tried to log in using a proxy and when proxy failed (for some reason) he logged in with his own IP. Robert Allen you must change your passwords and before doing this, try to do detailed scans of anti-virus, anti-spyware etc to get rid of suspicious program/file.
The one in belgium is me on holiday in november, between dates 7th-11th the 123-reg one was me (dial up on holiday in birmingham, the IP used to create this post) The proxy one wasnt me, because i dont use proxys. the AOL one is my home. Rob