Is something spying on my computer remotely?

Discussion in 'Malware Help (A Specialist Will Reply)' started by denutza, Jan 5, 2013.

  1. denutza

    denutza Private E-2

    Im worried about someone covertly trying to spy on my computer.

    I recently started blocked some system files in Comodo firewall that I previously gave access to.

    The log says something like" 'System/' is a safe application. However you are about to receive a connection from another computer..."

    These are from UDP protocol Source Port 138 (and now 137) which I understood to be some sort of remote desktop. Also am blocking TCP ports which i think may be doing the same.

    I have windows remote desktop disabled. I have teamviewer installed but it's not running, so Im unclear as to what computer is trying to connect.

    I followed all instructions. Hitman Pro shows 1 threat. MalwareBytes and TDSkiller came back clean..The other reports are attached.
     

    Attached Files:

    denutza, Jan 5, 2013
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!
    You have Teamviewer installed. Are you the one who installed it? Also I see OpenVPN probably from installing VPNCheck. Did you install this too?

    There are no real malware issues in your logs.
     
    chaslang, Jan 5, 2013
    #2
  3. denutza

    denutza Private E-2

    Yes I installed the two programs, however they are not actively running.

    I think its weird these system files are getting blocked every few minutes.
    This one shows a source IP (which I think is from Thailand) trying to access my computer (Source IP 182.52.xxx)

    Here is screenshot of Comodo events. Can I allow these through?

    http://i579.photobucket.com/albums/ss233/DeNutza/firewallevents_zpseddaedb8.jpg
     
    denutza, Jan 5, 2013
    #3
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Insufficient information! What system files?


    Thatis why you install protection software. It blocks the incoming attempts to access your PC. Just disable the notifications if it bothers you.
     
    chaslang, Jan 5, 2013
    #4
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Oh and by the way, Teamviewer is not shutdown completely just because you shutdown the program. It has a service running all the time and I can see it in your logs as running.

    I also noted that there are files/folders showing in your logs that indicate you have or had at one time, an infection that hide icons, start menu items, all programs items....etc. Did you have this problem or do you still have the problem?

    It also appears that you have both Avast and Microsoft Secuity Essentials running. You must only have one antivirus program installed.
     
    chaslang, Jan 5, 2013
    #5

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds