Search This Blog

Friday, May 25, 2012

Spyware?

Interesting case today, where the PC was slow, with high hdd activity and very strange traffic with task  Id 0 to IP 50.56.48.215 and 68.232.34.73 and possibly others. Few days ago this PC was highlighted by snort as "SPYWARE-PUT Trackware casalemedia runtime detection"

PC is protected with Trend.  After sucessful installation of Lavasoft, I realised that it actually did not install, folder is absent. Second time, the same result. Somebody is playing jokes? Third time it was installed ok and suddenly strange activity stopped, as if it deinstalled itself to avoid detection.

Further scan with Lavasoft and Kaspesky did not uncover anything. Puzzle...

No comments: