Just a few moments ago, I was looking at some threads when my Firewall (ATGuard) popped up this message:


Outbound TCP network communication is being attempted:
Application:

 

s2ki has never installed or uses any spyware. You probably have something on your machine that is watching where you are browsing.


get Ad-Aware from download.com and it will help you clean your machine.

 

Excellent tip!

Thanks,


Siepel

 

Wow, I just downloaded it (don't forget to get RefUpdate too) and scanned my machine. It found 20 things! Some crap called Cydoor is the most troubling

Get this and run it!

Also: We never have nor will we ever install or use "spyware" or any other software to impinge on your privacy.

 

realize -some- of what it finds are just cookies from known "tracking" sites, such as doubleclick. Which can only "track" you when you are on a doubleclick site, vs spyware which is installed on your machine and trracks -everywhere- you go.

A google search will find the details on just about any spy app you find.

 

Just downloaded it and scanned my work PC. Even behind a firewall I found about 12 things that I didn't like the look of, including "Cydoor".

And another bonus ,....... ad-aware actually removes "My comet cursor" as well !!!

I have been trying, without luck, to remove that for months !!!!

 

Hmmmmmm...

Well, I run Ad-Aware and all that good stuff, but just moments ago, again an application tried to log on to www.s2ki.com........??? Not detected by Ad-Aware!!! (But captured by my outbound firewall)...

Anything better than Ad-Aware available?


Siepel

 

There are no applications other than IE/web browser that would connect to www.s2ki.com. Post 80 is http or web traffic, that's the s2ki.com web server. Is your firewall software misfiring? Is there a specific URL address?

 

I'll check next time it pops up (which could take some time though). The URL is www.s2ki.com and also an IP is mentioned, but I am not sure which one that was last time. The application name is something like []*'[]*' which is strange by itself...

Thanks for thinking along with me..!


Siepel

 

==== U P D A T E ====

Okay guys. I am getting a little bit confused now.

Again, my firewall popped up with a warning. This time I made a screen-dump of it for all to see.

The address which it is 'calling for' is www.s2ki.com, but is also has an IP number below it.



I typed in the number 128.242.122.77 and the result was as above, the Peterson LLC page. But remarkably enough also a referral to the page "MazdaSix" (coming soon). It just so happened to be that one time I had virtually the same outbound attempt, but the numerical address (the IP number) referred to www.mazdasix.com, which I checked using the PING command in DOS mode...

I am starting to think that S2Ki is in fact running Spyware, knowingly or not!


Siepel