Free Republic
Browse · Search
General/Chat
Topics · Post Article

To: Severa
Tgcmd is likely installed by your cable modem software.

As of June 2001, Whagent has been installed on over seven million computers. Whagent is a product of the WebHancer company used to collect information about a users while they are browsing the Internet.

LoadQM: http://support.microsoft.com/s earch/preview.aspx?scid=kb;en-us;Q309418

Ndetect - are you running ICQ?

Ptsnoop is a simple backdoor program written in Visual Basic. Being activated it first looks for active RAS connections and exits immediately if none is found

Ocrawr32 has to do with OmniPage software

Ocraware same as above

Rnapp (or is it RNAAPP) is dial up modem software - do you have fax software??

Qttask - quicktime software

If I didn't put it in here, then I'm not sure. But it looks definitely like you have a backdoor/trojan installed with that PTSNOOP
2 posted on 06/29/2002 7:05:01 PM PDT by Tennessee_Bob
[ Post Reply | Private Reply | To 1 | View Replies ]


To: Tennessee_Bob
That ptsnoop could be bad or it could be you are using a PCTel modem, which has that file as part of it.


There is a discussion of this PTSNOOP good/ or bad at:
http://www.computing.net/secur ity/wwwboard/forum/105.html


3 posted on 06/29/2002 7:12:45 PM PDT by APBaer
[ Post Reply | Private Reply | To 2 | View Replies ]

Free Republic
Browse · Search
General/Chat
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson