Snapshot Spy

[tharaka.rajaguru]

Hi,

I noticed that every time that I open a window related to the sytem ( eg: Windows update ) the computer takes a snapshot of it. How I found out this is quite queer :

I opened Microsoft Word and I wanted do scroll down the document. So I clicked the mouse wheel and move the mouse down so the pages moved down slowly. When I clicked the mouse wheel button I noticed that instead of the appearing of up-down arrows, a square with a piece of image appeared. Without moving the mouse ( if so it disappears ) I clicked elsewhere and another square relating to the same image appeared. It didn't take me so long to realise that it was the image of my desktop while I had a printing session going on.

To test the temporary image I opened Paint and saw that the paste button was false, then I viewed the desktop and pressed the print screen button. Then I resumed to paint and clicked paste. Then image appeared there. Then I went back to the word document and did the clicking thing and spaces of my desktop appeared.

I don't know whether this is truly a spy infection or whether windows or any other application takes snapshots.

Tharaka

PS : My log files are with SpybotSandra, for that case my PC is suspected for an autorun infection.

[tashi]

Hello tharaka.rajaguru,

PS : My log files are with SpybotSandra, for that case my PC is suspected for an autorun infection.

Have you been given instructions? If not,

Please follow the instructions in this link to produce a HJT log: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)

Then start your own thread in the Malware Removal Forum where an analyst will advise you as soon as available.

You will need to let SpybotSandra know if you take that course of action.

Best regards.

[tharaka.rajaguru]

Actually what I don't know whether SBTeam reads the email that I reply or instead just download the attachment !? Else I can just email

[tashi]

Hello tharaka.rajaguru,

Please go ahead and start a topic in the Malware forum, links provided above.

Best regards.