I had my suspicions, but so far no-one has debited any of my bank accounts
(not that there's much to debit!). Thank you very much for that site. I did
try caVet but have been unhappy and certainly I keep hearing things about
Nortons, so all in all I have been suspicious of the very industry itself.
But I'll try your site right now...
"Terry Farrell" wrote in message
...
Alan
IIRC, not on Word2000. As Graham says, this sounds badly likely malware.
I recommend SpyBot Search and Destroy for attacking malware as it has been
the most successful utility I have used on my own and friend's computers
ate eradicating tough malware where many other utilities (and quite big
vendors) have failed. It is free to use for personal use but it is
imperative to make sure that you go to the correct site. There are several
other sites pretending to be the home of SpyBot and they end up making you
pay for what is a free utility.
Get it from he http://www.spybot.info/
Terry Farrell
"Aalaan" wrote in message
...
Is this a feature on Word 2000? It may explain some previously
inexplicable email sending that seems to go on while I'm on line and not
consciously sending anything.
"Terry Farrell" wrote in message
news
Word regularly connects to the Internet to update Help and report
changes you may have added to your Custom.dic (this may influence
whether these get added to the main spelling checker at a later update)
and other service options.
--
Terry Farrell - MS Word MVP
"Jean-Pierre" wrote in message
...
Hello,
Since a few days, everytime I start WORD, I get the message from my
anti-virus
that WORD has been recently modified, that it tries to access the
INTERNET and
that I should deny the permission unless I am sure that the
modification is due
to an update.
The connection details are :
OUTBOUND connection -
Protocol TCP -
Remote IP address :12.158.80.10
Destination port : 20480
The incriminated program is : WINWORD.EXE
Created : Jan 16, 2007 - 10:53:18 PM
Modified : Jan 16, 2007 - 10:53:18 PM
(The creation/modification date & time does not correspond to any known
action
of mine !)
I am not aware that I modified / updated WORD.
I updated my Anti-Virus (PANDA) and performed a full scan of the
computer : no
"malware" was detected.
I ran SPYBOT (after udating it) : Nothing found.
I ran Ad-Aware (after updating it) : it found 8 tracking cookies and
removed
them.
I re-started WORD and got again the message about WORD trying to access
the NET.
I do not understand why WORD should access the NET. Is there any reason
for it
or any setting requiring it ?
The address (12.158.80.10) seems to be from VERISIGN. Why should WORD
have to
connect to the VERISIGN site ?
Operating system is W2K - SP4
OFFICE version is 2002-SP3
Thank you in advance.
Jean-Pierre
Belgium