I am running WinXP Pro; SP3; all patches.
I have TrendMicro Client/Server Security Agent running on my machine continually.
On occasion, when my PC goes idle and the screen saver becomes active, it attempts to reach various websites on its own.
The only reason I even know that these attempts are being made is that TrendMicro displays them to me on occasion when the websites my machine attempts to contact are being blocked by Trend's Web Reputation protection.
There may be many other websites that are trying to be reached, and maybe it happens everytime my screen saver comes on, but today those that were blocked and logged by Trend are these:
http://al-cap.com/?lang=en/?lang=en&sayfa=iletisim/css/loop.mp3 http://al-cap.com/?lang=en/?lang=en/css/11.css http://al-cap.com/?lang=en/?lang=tr/?lang=en/?lang=tr&sayfa=urunler http://al-cap.com/?lang=tr&sayfa=firmamiz/?lang=tr&sayfa=anasayfa/?lang=tr&sayfa=firmamiz/?lang=tr&sayfa=iletisim http://al-cap.com/?lang=tr&sayfa=iletisim/?lang=tr&sayfa=firmamiz/css/11.css http://al-cap.com/?lang=en/css/?lang=en/css/?lang=tr http://al-cap.com/?lang=en/swf/?lang=en/swf/alcap.swf&sayfa=iletisim http://al-cap.com/?lang=tr&sayfa=anasayfa/?lang=tr&sayfa=firmamiz/?lang=tr&sayfa=firmamiz/swf/alcap.swf http://al-cap.com/?lang=tr&sayfa=iletisim/?lang=tr&sayfa=anasayfa/?lang=en/swf/header.swf http://al-cap.com/?lang=tr&sayfa=urunler/?lang=en/?lang=tr&sayfa=iletisim http://al-cap.com/?lang=tr&sayfa=urunler/?lang=tr&sayfa=iletisim/?lang=tr&sayfa=anasayfa/loop.mp3 http://www.tfile.ru/forum/viewforum.php?f=1160 http://alaconcaguasinesponsor.com/html/modules.php?name=Your_Account http://alaconcaguasinesponsor.com/html/modules.php?name=News&new_topic=11 http://alaconcaguasinesponsor.com/html/modules.php?name=Private_Messages&mode=post&u=754 http://alaconcaguasinesponsor.com/html/modules.php?name=Private_Messages&mode=post&u=22 http://alaconcaguasinesponsor.com/html/modules.php?name=Content http://www.aladown.com/download-area http://www.aladown.com/tag/%e4%bb%a3%e8%b4%ad http://www.aladown.com/tag/gfw http://www.aladown.com/website-news http://www.aladown.com/xmlrpc.php
None of these are familiar to me.
I have tried changing my screen saver from 'blank' to 'Google Photos Screensaver' and the behavior continues.
I have done a complete scan with Trend, Microsoft Security Essentials, Superantispyware and malwarebytes. Nothing has worked so far.
Please help.
Thank you,
-David