Help !!

zanza SG

Help!!!!

guys do any of you know how to interpret this ?

26.4.2006 08:07:00 Using Cyrus SASL 2.1.13
26.4.2006 08:07:00 Starting the main loop
26.4.2006 08:07:00 Redirector version 70004
26.4.2006 08:07:00 AutoPOP3(10110): Starting server
26.4.2006 08:07:00 Queue processing started
26.4.2006 23:10:06.859 [d44] AVG for E-mail [7.1.371] started
26.4.2006 23:10:09.937 [d44] Using AVG Kernel: 7.1.385 [268.4.6/323]
26.4.2006 23:10:10.531 [d44] AvgCfg: 0, IniCfg: 1
26.4.2006 23:10:10 Config: AVGCFG
26.4.2006 23:10:11 Using Cyrus SASL 2.1.13
26.4.2006 23:10:11 Driver is held by another instance of E-mail scanner!
26.4.2006 23:10:11 Starting the main loop
26.4.2006 23:10:11 Queue processing started
27.4.2006 23:43:37.906 [f3c] AVG for E-mail [7.1.371] started
27.4.2006 23:43:40.218 [f3c] Using AVG Kernel: 7.1.385 [268.4.6/323]
27.4.2006 23:43:40.328 [f3c] AvgCfg: 0, IniCfg: 1
27.4.2006 23:43:40 Config: AVGCFG
27.4.2006 23:43:41 Using Cyrus SASL 2.1.13
27.4.2006 23:43:42 Driver is held by another instance of E-mail scanner!
27.4.2006 23:43:42 Starting the main loop
27.4.2006 23:43:42 Queue processing started
28.4.2006 08:36:25.890 [694] AVG for E-mail [7.1.371] started
28.4.2006 08:36:28.031 [694] Using AVG Kernel: 7.1.385 [268.4.6/323]
28.4.2006 08:36:28.109 [694] AvgCfg: 0, IniCfg: 1
28.4.2006 08:36:28 Config: AVGCFG
28.4.2006 08:36:29 Using Cyrus SASL 2.1.13
28.4.2006 08:36:29 Driver is held by another instance of E-mail scanner!
28.4.2006 08:36:29 Starting the main loop
28.4.2006 08:36:29 Queue processing started
2.5.2006 07:56:30.109 [320] AVG for E-mail [7.1.371] started
2.5.2006 07:56:32.734 [320] Using AVG Kernel: 7.1.385 [268.5.1/327]
2.5.2006 07:56:32.921 [320] AvgCfg: 0, IniCfg: 1
2.5.2006 07:56:32 Config: AVGCFG
2.5.2006 07:56:34 Using Cyrus SASL 2.1.13
2.5.2006 07:56:35 Driver is held by another instance of E-mail scanner!
2.5.2006 07:56:35 Starting the main loop
2.5.2006 07:56:35 Queue processing started
3.5.2006 21:01:00.234 [6f4] AVG for E-mail [7.1.371] started
3.5.2006 21:01:04.796 [6f4] Using AVG Kernel: 7.1.385 [268.5.1/328]
3.5.2006 21:01:05.390 [6f4] AvgCfg: 0, IniCfg: 1
3.5.2006 21:01:05 Config: AVGCFG
3.5.2006 21:01:06 Using Cyrus SASL 2.1.13
3.5.2006 21:01:07 Starting the main loop
3.5.2006 21:01:07 Redirector version 70004
3.5.2006 21:01:07 Queue processing started
3.5.2006 21:01:07 AutoPOP3(10110): Starting server
5.5.2006 17:24:03.281 [5b4] AVG for E-mail [7.1.371] started
5.5.2006 17:24:04.687 [5b4] Using AVG Kernel: 7.1.385 [268.5.1/328]
5.5.2006 17:24:05.031 [5b4] AvgCfg: 0, IniCfg: 1
5.5.2006 17:24:05 Config: AVGCFG
5.5.2006 17:24:06 Using Cyrus SASL 2.1.13
5.5.2006 17:24:07 Starting the main loop
5.5.2006 17:24:07 Redirector version 70004
5.5.2006 17:24:07 AutoPOP3(10110): Starting server
5.5.2006 17:24:07 Queue processing started
5.5.2006 17:51:21 AutoPOP3(10110): Connection from process 1688
5.5.2006 17:51:21 AutoPOP3(10110): Connection from 127.0.0.1:2139
5.5.2006 17:51:21 AutoPOP3(10110): Client connected
5.5.2006 17:51:45 AutoPOP3(10110): Cannot connect to cpe-071-068-066-133.carolina.res.rr.com:110
5.5.2006 17:51:45 AutoPOP3(10110): Connect: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. (10060)
5.5.2006 17:51:45 AutoPOP3(10110): Client disconnected
5.5.2006 17:54:53 Configuration saved

Its seems that some program on my com has been sending my info
had no idea it was happening until after i happened to catch my avg scanning some email attachment sending out

Any advice on wat to do ?

chanff8 SG

Hm... sending your info? I think its just a normal transaction of data over the net. I don't see anything fishy in there Wink

zanza SG

erm no as in , the avg scanner for email started scanning an outgoing email from my com , which i did not send.

It happened while i was playing some games on fullscreen i would not have noticed it if i didnt alt-tab .

Its the first time i noticed it but when i checked the log, it appears that it has happened several time already, all without my knowledge

Scares me to think what kind of info its sending

chanff8 SG

Shocked

I see... Time to check your computer for spyware and viruses. Update before scanning

ndmmxiaomayi SG

Disconnect from the Internet and monitor the firewall. If there are attempts to send emails out while you are typing something, there could be spywares or viruses on your computer.

Then connect to the Internet and do something like reading an email. Set up a fake email account with a simple password like 1234567890, and use AVG to monitor if there are out-going mails. Your firewall could help, but firewall logs are harder to read. If there's nothing fishy here, it could be the games you are playing that are infected, especially if you downloaded them from crack sites.

Port 10110 is used by AVG. You can read more about it here

For port 10060, it is a common connection time-out error that usually appears when the client does not receive a response from the server for a specific command.

zanza SG

Thanks for the help guys

Just tried scanning with ad-aware, spybot, microsoft defender,zonealarm antispyware, yahoo toolbar and still nothing Confused

Haiz , i guess the best i can do is to configure my Avg to remove all attachments to the email until i can find that pesky program

Once again thanks for the help Smile

SilverPal SG

Looks like an activity log being sent out. Unless you have a program that is configured to send your computer activity to another IP, you should block this transmission at your firewall.

The AUTOPOP3 is very suspicions. It starts its own email server and sends your information to another IP address. It can evade detection as long as it does not use your default email program.

On the whole, the activity being sent out doesn't seem very critical but it might give an attacker the necessary information as to what protective programs are you running on your computer and he would be able to take the necessary steps to circomvent your protection accordingly.