[Noodle22]

I've gotten reamed out by a few customers because our system loads up the acct, then the part that shows whether a pin is required or not is greyed out and delayed with loading. I'll ask for their DOB and postal code first, and then if I see it ungrey out I'll ask for their pin.

I've learnt not to do this, they get quite upset when I don't just ask for the pin. They are quick to accuse us of not doing our job and I find it causes more hassle. Now I just sit in an awkward silence waiting to see if a pin shows.

[trax95008]

would you mind listing all your applications for us to see? maybe one of us will recognize something.

options, advanced options, applications. list everything you see there

[Need_To_Know]

So, I have been watching my bill trying to figure out these wap.cingular and blackberry.net items. In the past, I was sorting by name to make the viewing easier but now I am looking at the bill sorted by date and I see the following:

02/04 05:38 PM wap.cingular Internet/MEdia Net Sent 2KB
02/04 05:20 PM wap.cingular Internet/MEdia Net Sent 20KB
02/04 05:18 PM wap.cingular Internet/MEdia Net Sent 3KB
02/04 05:18 PM blackberry.net Internet/MEdia Net Sent 48KB

I was driving home from work at this time so I know I wasn't accessing the internet. Now I can see a trend.....every time there is a blackberry.net data item, it is followed by several wap.cingular entries.

I had really hoped there would be a guru out there that could help me!

[jsconyers]

We've given you advice, you are only listening to half of what we're saying. It may not be the device he's looking at.

[zerog46]

Also, I don't know what state you live in but you don't need proof of anything to get a protection order.

[djm2]

Originally Posted by Need_To_Know

I had really hoped there would be a guru out there that could help me!

A number of suggestions have been made that would help isolate what is going on. Apparently you have elected to ignore those as they did not fit in with your preconceived easy solution.

[Need_To_Know]

I am not sure what you are referring to because I have done everything that has been suggested. I did call to be sure he wasn't on my account and I have changed my password on the account several times, I only access my account from work so he has no way of logging it. I have gone through the event log, I have checked the applications and the modules and searched everything I can. I checked our home pc for internet history to see if he was accessing spy sites, but wouldn't you know it....it's all been deleted. Apparently, he runs the %temp% command and deletes everything each day.

[jsconyers]

You never said that you changed your password on your account, how are we to know that you've taken those steps unless you tell us. The more details we have, the more helpful it would be to help us help you!

[Need_To_Know]

I sent a test text message at 1:42 and waited a few minutes then opened the log file. There was no other activity for the next 10 minutes on the device, no emails, phone calls, etc. Here is the log info starting at 1:42....can anyone translate it? Once again, thank you for any assistance you can offer.

a System - VM:ICSFv=1,w=131044 - 2/5 13:51:01
a net.rim.otasync - AG,-CPT - 2/5 13:48:55
a net.rim.otasync - AG,USID=71,STY=3,-SESS,SID=531345192,CLID=19832,SST=5 - 2/5 13:46:55
a net.rim.otasync - TP,Rx,SZ=7,USID=71,TID=2527186,SID=531345192,SEQ=1 ,LSEQ=1 - 2/5 13:46:55
i net.rim.udp - TXss - 2/5 13:46:55
d net.rim.udp - TXsb - 2/5 13:46:55
i net.rim.udp - TXst - 2/5 13:46:55
a net.rim.otasync - RXCd 2527186 - 2/5 13:46:55
i net.rim.mdp - TPda - 2/5 13:46:55
d net.rim.gme - RDPu - 2/5 13:46:55
d net.rim.gme - RDKf - 2/5 13:46:55
i net.rim.gme - RDKd - 2/5 13:46:55
i net.rim.gme - RDCe - 2/5 13:46:55
i net.rim.gme - RXCd - 2/5 13:46:55
i net.rim.gme - RHFs - 2/5 13:46:55
i net.rim.gme - RXPh - 2/5 13:46:55
i net.rim.gme - RXst - 2/5 13:46:55
d net.rim.mdp - RXpu - 2/5 13:46:55
i net.rim.mdp - RXst - 2/5 13:46:55
d net.rim.udp - RXpu - 2/5 13:46:55
i net.rim.udp - RXst - 2/5 13:46:55
a net.rim.otasync - AG,USID=71,STY=3,+SESS,SID=531345192,CLID=19832,TI M=20 - 2/5 13:46:55
i net.rim.mdp - TXss - 2/5 13:46:55
i net.rim.mdp - RPda - 2/5 13:46:55
i net.rim.mdp - RXst - 2/5 13:46:55
d net.rim.udp - RXpu - 2/5 13:46:55
i net.rim.udp - RXst - 2/5 13:46:55
d net.rim.mdp - TTst - 2/5 13:46:54
i net.rim.udp - TXss - 2/5 13:46:54
d net.rim.udp - TXsb - 2/5 13:46:54
i net.rim.udp - TXst - 2/5 13:46:54
d net.rim.mdp - TXsb - 2/5 13:46:54
d net.rim.mdp - TTst - 2/5 13:46:54
i net.rim.udp - TXss - 2/5 13:46:54
d net.rim.udp - TXsb - 2/5 13:46:54
i net.rim.udp - TXst - 2/5 13:46:54
d net.rim.mdp - TXsb - 2/5 13:46:54
i net.rim.mdp - TXst - 2/5 13:46:54
d net.rim.gme - TXSs - 2/5 13:46:54
i net.rim.gme - TCKe - 2/5 13:46:54
i net.rim.gme - TXCE - 2/5 13:46:54
d net.rim.gme - THWd - 2/5 13:46:54
d net.rim.gme - TXMh - 2/5 13:46:54
i net.rim.gme - TCCe - 2/5 13:46:54
i net.rim.gme - TCEe - 2/5 13:46:54
i net.rim.gme - TIDh - 2/5 13:46:54
i net.rim.gme - TIUd - 2/5 13:46:54
d net.rim.gme - TXGi - 2/5 13:46:54
i net.rim.gme - TXst - 2/5 13:46:54
a net.rim.otasync - TXst -1975906331 - 2/5 13:46:54
a net.rim.otasync - TP,Tx,SZ=9538,USID=71,TID=0,SID=531345192,CLID=198 32,ECLID=51,SEQ=1,LSEQ=1 - 2/5 13:46:54
d net.rim.otasync - AG,SCAN,Recipient Cache,NCMDS=1 - 2/5 13:46:53
a net.rim.otasync - AG,+CPT - 2/5 13:46:53
d net.rim.otasync - AG,USID=71,BLCKD,TIM=5 - 2/5 13:46:48
d net.rim.otasync - AG,USID=71,BLCKD,TIM=5 - 2/5 13:46:43
d net.rim.otasync - AG,USID=71,BLCKD,TIM=5 - 2/5 13:46:38
d net.rim.otasync - AG,USID=71,BLCKD,TIM=5 - 2/5 13:46:33
d net.rim.otasync - AG,USID=71,BLCKD,TIM=5 - 2/5 13:46:28
a net.rim.smsui - UTSC - 2/5 13:42:15
i net.rim.sms - TXss - 2/5 13:42:15
a net.rim.smsui - UTSC - 2/5 13:42:12
d net.rim.sms - TXsb - 2/5 13:42:12
i net.rim.sms - TXst - 2/5 13:42:12
a net.rim.smsui - UTSC - 2/5 13:42:12

[hrbuckley]

So there is OTA Sync activity going on. Are you on a BES or Desktop redirector through work or home? Check your security options page for an IT Policy Name, and check just below for the Services listed.

[JSanders]

I'll only whisper this quietly... how do we know you are not the one spying on another trying to determine what the other "he" or "she" is up to?

It's happened on here before. Several times. I recall two instances specifically where the spouse finally admitted it to us.

No accusation here.. just a comment.

Carry on.

[Need_To_Know]

It is a personal blackberry that is attached to my work email server. I bought it on my own and then had IT link it up. The IT policy name says "Default".

JSanders: I appreciate the reservations you may have, however I don't see anything in the log file that even indicates what I am doing or who I called or texted. Simply knowing what the commands mean (made a call, received a call, sent a message, etc) wouldn't really tell me anything that a spying spouse would be looking for. I am asking specifically if anyone sees anything that would identify that my transactions are being recorded and reported.

[JSanders]

On your BES account, everything you do, email, surf, text, message, call, etc., can be logged/tracked by your BES Admin.
That doesn't mean your company does, just that they certainly can.

I hope your BES admin or IT people are not your husband's best friend(s).

BES Users FAQ - BlackBerryFAQ

[turn_key]

I would bet he knows the password to your att account. Change it just in case. I talked to my brother who had att and there is a phone and text message log online.

[tsac]

Originally Posted by Need_To_Know

Thank you for the responses. I did call AT&T and there are no other authorized users on my account. I tested the theory of whether he is browsing through my phone by making a call to a random family member (that he doesn't particularly like) and then deleting the call log. This morning he said I should call this person and see how their family is doing. I know he was fishing because he is nosy and can't stand it if I talk to people. It's obvious that he is somehow tracking me without looking at my phone.

I looked at the applications->modules and I don't see anything unusual. I opened just about every module's information and most of them list the vendor as Research In Motion (with the same version number) or Telenav (I have AT&T Navigator installed).

This is important to me because I want to use any proof I can find (along with other stuff) to get a protective order.

I am still curious about the large files that are sent at random times throughout the day and night showing up as "blackberry.net". I read that many 3rd party applications use blackberry.net to transfer data, so I guess it could be anything.

Still seeking any additional advice/tips.......

Originally Posted by Need_To_Know

I am not sure what you are referring to because I have done everything that has been suggested. I did call to be sure he wasn't on my account and I have changed my password on the account several times, I only access my account from work so he has no way of logging it. I have gone through the event log, I have checked the applications and the modules and searched everything I can. I checked our home pc for internet history to see if he was accessing spy sites, but wouldn't you know it....it's all been deleted. Apparently, he runs the %temp% command and deletes everything each day.

Hmmm Ok so now I’m a little confused and tend to agree with JSanders and his comment.
You talk about getting a restraining order and also seem to say he has access to your home PC and cleans the internet files. So that does not seem right. And you don’t realize the account usage details are available on line via the carrier or at least are ignoring the possibility he is using that to track you that way. So why are you really asking these questions.

[Need_To_Know]

This is my last ditch effort to figure this out. I received a text message at 12:05 and here is a copy of the log:

d net.rim.deviceagent - UPDO - 2/10 12:07:27
d profiles - SEQC - 2/10 12:06:00
a PTT - RIMSM EV= playback done 1265825160752 - 2/10 12:06:00
d profiles - SEQC - 2/10 12:05:59
d profiles - DONE - 2/10 12:05:59
d profiles - SEQC - 2/10 12:05:59
d profiles - STRB - 2/10 12:05:59
d profiles - ST 3 - 2/10 12:05:59
d profiles - W 1 - 2/10 12:05:59
d profiles - WNOT - 2/10 12:05:59
d profiles - W - 2/10 12:05:59
d profiles - WOKE - 2/10 12:05:59
d profiles - W - 2/10 12:05:57
d profiles - WOKE - 2/10 12:05:57
d profiles - NOTI - 2/10 12:05:57
d profiles - SEQC - 2/10 12:05:57
d profiles - ENDV - 2/10 12:05:57
d profiles - SEQC - 2/10 12:05:56
d profiles - STRV - 2/10 12:05:56
d profiles - ST 2 - 2/10 12:05:56
d profiles - W 1 - 2/10 12:05:56
d profiles - WNOT - 2/10 12:05:56
d profiles - W - 2/10 12:05:56
d profiles - WOKE - 2/10 12:05:56
d profiles - W - 2/10 12:05:54
d profiles - WOKE - 2/10 12:05:54
d profiles - NOTI - 2/10 12:05:54
d profiles - SEQC - 2/10 12:05:54
d profiles - ENDV - 2/10 12:05:54
d profiles - STRV - 2/10 12:05:52
d profiles - ST 2 - 2/10 12:05:52
d profiles - W 2 - 2/10 12:05:52
d profiles - NEWA - 2/10 12:05:52
d profiles - WNOT - 2/10 12:05:52
d profiles - OBIH - 2/10 12:05:52
d profiles - W 1 - 2/10 12:05:52
d profiles - T 4 - 2/10 12:05:52
a net.rim.smsui - MRX - 2/10 12:05:52
a PTT - level=0 knTransactionController knIsAVSMessage P2T message Recvd - 2/10 12:05:52
d net.rim.sms - RXpu - 2/10 12:05:52
i net.rim.sms - RXst - 2/10 12:05:52

I am wondering what the 2 references to PTT are for. I do not use Push to Talk, but it appears that it is being used for something. Here are the processes that are running (according to "Kisses"):

net_rim_bb_browser_push
Reminders
Home Screen
com_plazmic_themereader
File Index Service
Browser
WirelessUpgradeApp
net_rim_cldc_io_tcp
SUPL
Kisses
BlackberryMessenger
Phone
net_rim_services_impl
Call Control
Messages
net_rim_bluetooth
Push to Talk

Does any of this look unusual? Push to Talk is listed in these processes but it is not listed in the applications for me to delete. ?

Also, does anyone know if an AT&T technician would be able to locate a suspicious program? I have an AT&T repair center in my area, I was thinking I would just take it in and let a professional look at it. Thanks.

[Thatzmister2u]

Originally Posted by Need_To_Know

This is my last ditch effort to figure this out. I received a text message at 12:05 and here is a copy of the log:

d net.rim.deviceagent - UPDO - 2/10 12:07:27
d profiles - SEQC - 2/10 12:06:00
a PTT - RIMSM EV= playback done 1265825160752 - 2/10 12:06:00
d profiles - SEQC - 2/10 12:05:59
d profiles - DONE - 2/10 12:05:59
d profiles - SEQC - 2/10 12:05:59
d profiles - STRB - 2/10 12:05:59
d profiles - ST 3 - 2/10 12:05:59
d profiles - W 1 - 2/10 12:05:59
d profiles - WNOT - 2/10 12:05:59
d profiles - W - 2/10 12:05:59
d profiles - WOKE - 2/10 12:05:59
d profiles - W - 2/10 12:05:57
d profiles - WOKE - 2/10 12:05:57
d profiles - NOTI - 2/10 12:05:57
d profiles - SEQC - 2/10 12:05:57
d profiles - ENDV - 2/10 12:05:57
d profiles - SEQC - 2/10 12:05:56
d profiles - STRV - 2/10 12:05:56
d profiles - ST 2 - 2/10 12:05:56
d profiles - W 1 - 2/10 12:05:56
d profiles - WNOT - 2/10 12:05:56
d profiles - W - 2/10 12:05:56
d profiles - WOKE - 2/10 12:05:56
d profiles - W - 2/10 12:05:54
d profiles - WOKE - 2/10 12:05:54
d profiles - NOTI - 2/10 12:05:54
d profiles - SEQC - 2/10 12:05:54
d profiles - ENDV - 2/10 12:05:54
d profiles - STRV - 2/10 12:05:52
d profiles - ST 2 - 2/10 12:05:52
d profiles - W 2 - 2/10 12:05:52
d profiles - NEWA - 2/10 12:05:52
d profiles - WNOT - 2/10 12:05:52
d profiles - OBIH - 2/10 12:05:52
d profiles - W 1 - 2/10 12:05:52
d profiles - T 4 - 2/10 12:05:52
a net.rim.smsui - MRX - 2/10 12:05:52
a PTT - level=0 knTransactionController knIsAVSMessage P2T message Recvd - 2/10 12:05:52
d net.rim.sms - RXpu - 2/10 12:05:52
i net.rim.sms - RXst - 2/10 12:05:52

I am wondering what the 2 references to PTT are for. I do not use Push to Talk, but it appears that it is being used for something. Here are the processes that are running (according to "Kisses"):

net_rim_bb_browser_push
Reminders
Home Screen
com_plazmic_themereader
File Index Service
Browser
WirelessUpgradeApp
net_rim_cldc_io_tcp
SUPL
Kisses
BlackberryMessenger
Phone
net_rim_services_impl
Call Control
Messages
net_rim_bluetooth
Push to Talk

Does any of this look unusual? Push to Talk is listed in these processes but it is not listed in the applications for me to delete. ?

Also, does anyone know if an AT&T technician would be able to locate a suspicious program? I have an AT&T repair center in my area, I was thinking I would just take it in and let a professional look at it. Thanks.

Trust me on this one. The folks here have more knowledge than any ATT store. I for one this they have obtained your ATT password and are checking your usage on-line. I would suggest changing your ATT password and my guess is that it will stop.

Best of Luck!

E-

[Noodle22]

If my memory serves me right, isn't Kisses a spyware program? Or it was made by the guy who made PhoneSnoop, another spyware program?

[paramedic233]

Kisses is a detector, or so it is billed.

[Need_To_Know]

I have changed my online password for the account, several times. It is very random and could not be guessed. I also have the account notifications set to go to my work email so I would know if the "forgot your password" was used.

"Kisses" is a program that I just installed which is supposed to locate hidden spyware. It does seem to show processes that are running but it says "No Spyware Found". I don't necessarily trust it.

The question about the AT&T tech....I wasn't referring to a store, but rather a service/repair center. I have never been there, I have just driven by and noticed it.