I'm being followed :)

intanet · #1 (**permalink**) November 8th, 2005

Hey,
I get the feeling I am being followed by someone. There is a file that is 134kbits where the guy imitates Bill Clinton saying "I did not have sex with Monica Lewinsky." I only listened to the first 10 seconds and it is kind of funny. It mascarades under different file names and lately, in so many files I search for, this file comes up under that name. I mean tonight I ran a search for Teddy Randazzo and Emilio Pericoli! Doesn't matter how obscure the search names, this file comes up under those names. It feels like this guy or girl is following me in my searches. When I tried to browse host, it is greyed for these files. I blocked the user but it only blocks from that particular search, not totally blocking them. I ran a spyware/adware search and nothing came up.
Any suggestions???

Only A Hobo · #2 (**permalink**) November 8th, 2005

If you use search (above right) for "clinton" you will find you are not alone, and you will find some explanation of these little beasts. The thing to remember is that a music song file is likely to be somewere about 3-6 MB and a small file like yours should not be downloaded unless you are expecting an exceedingly short song!

intanet · #3 (**permalink**) November 8th, 2005

Thanks for the info. So the buggers are following me from what I read in one of the posts you referred me to. The exact file size is 134.4kb. Crap. Anyhow, I got 2 of the ip addresses offering this file and put them in the banned IP list in "Options" "Filters". Don't know if they are the actual trojaneers or just some unsuspecting people who downloaded the file and never deleted it from their share folder... PLEASE folks. Clean out the junk from your share folder. Otherwise you will be uploading this kind of garbage to your peers.
Thanks,
Angie

Oh yeah, FYI the 2 IP addresses that offered this bogus file under the name "It's so nice to have a friend" are
17.194.23.98 and
69.196.243.87.

intanet · #4 (**permalink**) November 8th, 2005

Got 4 more IP address for the next 2 searches I ran that offered this bogus file for "Lover when you're near me" and "Give me Jesus".

72.140.245.252
12.203.102.192
80.119.199.154
81.111.12.127

So it's a trojan from what I read in the other post. But how do I get rid of it? They are following around my searches like they know what I'm typing and offering this file instead. Is this trojan in the Windows XP files or in Limewire or on the hard drive? Any solutions to this problem?

6_pac · #5 (**permalink**) November 9th, 2005

You can click on the "Size" column header in your search so it lists the largest files first, then all those little spam/virus files will be at the bottom of the list.

You can also filter the search results by file types. Say if all the affending files are wma. and wmv. you can go in LW Tools>Options>Filters>Keywords>add the file extensions and hit apply.

Or you could block the host of all the bad files by right clicking on the file in the search results then click "block host", but I think that is the least effective because they keep comming out with different ip address.

intanet · #6 (**permalink**) November 9th, 2005

Thanks for the info. Only thing is I can't block the extention cause it's mp3 and most of my downloads are mp3s. Don't mind much about them coming up in the searches since I know the two main offending sizes 134.4kb and 60.5kb (although there may be more I am not aware of). But it's the fact that they are a trojan or spyware or whatever that is able to know what I am searching and it presents the offending file in that name is what bugs me and how to find it on my system to put an end to that.
Thanks for your help