Unauthorized Internet connection.

[Guest]

Archived from groups: microsoft.public.windowsnt.misc (More info?)

I'm running NT4.0 with a modem Internet connection. The system works
well but lately I've noticed something kind of scary. Without any
user input, my Internet connection spontaneously starts. The small
"now connecting" box comes up and the modem is dialed just as
it does when I start it by clicking on the startup icon.

I have let such a logon proceed and then looked at applications and
processes via Task Manager but I have not seen anything that looks
out of place. In fact after the connection the system idle process
is usually at 99%.

I've checked my Scheduled Tasks and there are none. The only time
I have observed this spontaneous connection is in late morning.

I use Norton Antivirus and update it every week religiously.

This looks and feels like my computer has been hacked and is
being used. Is there any legitimate reason this could be
happening?

What else can I do to find out why this thing is running and to
stop it?

Thanks,
Zaster

 

[Guest]

Archived from groups: microsoft.public.windowsnt.misc (More info?)

Is this a single computer or a server on a network? If it is an NT server on
a network is it using MS proxy?

DDS

"Billy Smith" <zaster39sap@yahoo.com> wrote in message
news:icf8d.15069$DV3.7691@bignews5.bellsouth.net...
> I'm running NT4.0 with a modem Internet connection. The system works
> well but lately I've noticed something kind of scary. Without any
> user input, my Internet connection spontaneously starts. The small
> "now connecting" box comes up and the modem is dialed just as
> it does when I start it by clicking on the startup icon.
>
> I have let such a logon proceed and then looked at applications and
> processes via Task Manager but I have not seen anything that looks
> out of place. In fact after the connection the system idle process
> is usually at 99%.
>
> I've checked my Scheduled Tasks and there are none. The only time
> I have observed this spontaneous connection is in late morning.
>
> I use Norton Antivirus and update it every week religiously.
>
> This looks and feels like my computer has been hacked and is
> being used. Is there any legitimate reason this could be
> happening?
>
> What else can I do to find out why this thing is running and to
> stop it?
>
> Thanks,
> Zaster
>
>

 

[Guest]

Archived from groups: microsoft.public.windowsnt.misc (More info?)

Single machine in my home, running NT Workstation, nobody else has access to
the machine.

--Billy

"Danny Sanders" <Danny.Sanders@cpcNOmedSPAM.org> wrote in message
news:e8Ig5ijqEHA.2764@TK2MSFTNGP11.phx.gbl...
> Is this a single computer or a server on a network? If it is an NT server
on
> a network is it using MS proxy?
>
> DDS
>
> "Billy Smith" <zaster39sap@yahoo.com> wrote in message
> news:icf8d.15069$DV3.7691@bignews5.bellsouth.net...
> > I'm running NT4.0 with a modem Internet connection. The system works
> > well but lately I've noticed something kind of scary. Without any
> > user input, my Internet connection spontaneously starts. The small
> > "now connecting" box comes up and the modem is dialed just as
> > it does when I start it by clicking on the startup icon.
> >
> > I have let such a logon proceed and then looked at applications and
> > processes via Task Manager but I have not seen anything that looks
> > out of place. In fact after the connection the system idle process
> > is usually at 99%.
> >
> > I've checked my Scheduled Tasks and there are none. The only time
> > I have observed this spontaneous connection is in late morning.
> >
> > I use Norton Antivirus and update it every week religiously.
> >
> > This looks and feels like my computer has been hacked and is
> > being used. Is there any legitimate reason this could be
> > happening?
> >
> > What else can I do to find out why this thing is running and to
> > stop it?
> >
> > Thanks,
> > Zaster
> >
> >
>
>

 

[Guest]

Archived from groups: microsoft.public.windowsnt.misc (More info?)

I would download, install and run Ad-aware 6 and spybot search and destroy.
Both are free.

Unless you have something scheduled (antivirus updates?) this should not be
happening.


hth
DDS W 2k MVP MCSE


"Billy Smith" <zaster39sap@yahoo.com> wrote in message
news:45g8d.15098$DV3.10890@bignews5.bellsouth.net...
> Single machine in my home, running NT Workstation, nobody else has access
to
> the machine.
>
> --Billy
>
> "Danny Sanders" <Danny.Sanders@cpcNOmedSPAM.org> wrote in message
> news:e8Ig5ijqEHA.2764@TK2MSFTNGP11.phx.gbl...
> > Is this a single computer or a server on a network? If it is an NT
server
> on
> > a network is it using MS proxy?
> >
> > DDS
> >
> > "Billy Smith" <zaster39sap@yahoo.com> wrote in message
> > news:icf8d.15069$DV3.7691@bignews5.bellsouth.net...
> > > I'm running NT4.0 with a modem Internet connection. The system works
> > > well but lately I've noticed something kind of scary. Without any
> > > user input, my Internet connection spontaneously starts. The small
> > > "now connecting" box comes up and the modem is dialed just as
> > > it does when I start it by clicking on the startup icon.
> > >
> > > I have let such a logon proceed and then looked at applications and
> > > processes via Task Manager but I have not seen anything that looks
> > > out of place. In fact after the connection the system idle process
> > > is usually at 99%.
> > >
> > > I've checked my Scheduled Tasks and there are none. The only time
> > > I have observed this spontaneous connection is in late morning.
> > >
> > > I use Norton Antivirus and update it every week religiously.
> > >
> > > This looks and feels like my computer has been hacked and is
> > > being used. Is there any legitimate reason this could be
> > > happening?
> > >
> > > What else can I do to find out why this thing is running and to
> > > stop it?
> > >
> > > Thanks,
> > > Zaster
> > >
> > >
> >
> >
>
>

 

[Guest]

Archived from groups: microsoft.public.windowsnt.misc (More info?)

I checked my anti-virus update scheduler and it is not scheduled for
automatic
run (I do it manually). I don't know of anything else on my machine that
would
do an automatic connection. And, even if there were, don't legitimate
programs that do automatic connections put up a window telling you what's
going on?

I just ran Spybot Search and Destroy and it found the usual few tracker
cookies.
Do you think there's any point in running Ad-ware 6?

--Zaster


"Danny Sanders" <Danny.Sanders@cpcNOmedSPAM.org> wrote in message
news:OSigNvjqEHA.1160@tk2msftngp13.phx.gbl...
> I would download, install and run Ad-aware 6 and spybot search and
destroy.
> Both are free.
>
> Unless you have something scheduled (antivirus updates?) this should not
be
> happening.
>
>
> hth
> DDS W 2k MVP MCSE
>
>
> "Billy Smith" <zaster39sap@yahoo.com> wrote in message
> news:45g8d.15098$DV3.10890@bignews5.bellsouth.net...
> > Single machine in my home, running NT Workstation, nobody else has
access
> to
> > the machine.
> >
> > --Billy
> >
> > "Danny Sanders" <Danny.Sanders@cpcNOmedSPAM.org> wrote in message
> > news:e8Ig5ijqEHA.2764@TK2MSFTNGP11.phx.gbl...
> > > Is this a single computer or a server on a network? If it is an NT
> server
> > on
> > > a network is it using MS proxy?
> > >
> > > DDS
> > >
> > > "Billy Smith" <zaster39sap@yahoo.com> wrote in message
> > > news:icf8d.15069$DV3.7691@bignews5.bellsouth.net...
> > > > I'm running NT4.0 with a modem Internet connection. The system
works
> > > > well but lately I've noticed something kind of scary. Without any
> > > > user input, my Internet connection spontaneously starts. The small
> > > > "now connecting" box comes up and the modem is dialed just as
> > > > it does when I start it by clicking on the startup icon.
> > > >
> > > > I have let such a logon proceed and then looked at applications and
> > > > processes via Task Manager but I have not seen anything that looks
> > > > out of place. In fact after the connection the system idle process
> > > > is usually at 99%.
> > > >
> > > > I've checked my Scheduled Tasks and there are none. The only time
> > > > I have observed this spontaneous connection is in late morning.
> > > >
> > > > I use Norton Antivirus and update it every week religiously.
> > > >
> > > > This looks and feels like my computer has been hacked and is
> > > > being used. Is there any legitimate reason this could be
> > > > happening?
> > > >
> > > > What else can I do to find out why this thing is running and to
> > > > stop it?
> > > >
> > > > Thanks,
> > > > Zaster
> > > >
> > > >
> > >
> > >
> >
> >
>
>

 

[Guest]

Archived from groups: microsoft.public.windowsnt.misc (More info?)

> do an automatic connection. And, even if there were, don't legitimate
> programs that do automatic connections put up a window telling you what's
> going on?

Not necessarily. I would download and install Zone alarm or Sygate personal
firewall they will put up a window letting you know what is trying to access
the Internet.


> Do you think there's any point in running Ad-ware 6?


Couldn't hurt.


hth
DDS W 2k MVP MCSE

"Billy Smith" <zaster39sap@yahoo.com> wrote in message
news:Rfy8d.20413$DV3.7463@bignews5.bellsouth.net...
> I checked my anti-virus update scheduler and it is not scheduled for
> automatic
> run (I do it manually). I don't know of anything else on my machine that
> would
> do an automatic connection. And, even if there were, don't legitimate
> programs that do automatic connections put up a window telling you what's
> going on?
>
> I just ran Spybot Search and Destroy and it found the usual few tracker
> cookies.
> Do you think there's any point in running Ad-ware 6?
>
> --Zaster
>
>
> "Danny Sanders" <Danny.Sanders@cpcNOmedSPAM.org> wrote in message
> news:OSigNvjqEHA.1160@tk2msftngp13.phx.gbl...
> > I would download, install and run Ad-aware 6 and spybot search and
> destroy.
> > Both are free.
> >
> > Unless you have something scheduled (antivirus updates?) this should not
> be
> > happening.
> >
> >
> > hth
> > DDS W 2k MVP MCSE
> >
> >
> > "Billy Smith" <zaster39sap@yahoo.com> wrote in message
> > news:45g8d.15098$DV3.10890@bignews5.bellsouth.net...
> > > Single machine in my home, running NT Workstation, nobody else has
> access
> > to
> > > the machine.
> > >
> > > --Billy
> > >
> > > "Danny Sanders" <Danny.Sanders@cpcNOmedSPAM.org> wrote in message
> > > news:e8Ig5ijqEHA.2764@TK2MSFTNGP11.phx.gbl...
> > > > Is this a single computer or a server on a network? If it is an NT
> > server
> > > on
> > > > a network is it using MS proxy?
> > > >
> > > > DDS
> > > >
> > > > "Billy Smith" <zaster39sap@yahoo.com> wrote in message
> > > > news:icf8d.15069$DV3.7691@bignews5.bellsouth.net...
> > > > > I'm running NT4.0 with a modem Internet connection. The system
> works
> > > > > well but lately I've noticed something kind of scary. Without any
> > > > > user input, my Internet connection spontaneously starts. The
small
> > > > > "now connecting" box comes up and the modem is dialed just as
> > > > > it does when I start it by clicking on the startup icon.
> > > > >
> > > > > I have let such a logon proceed and then looked at applications
and
> > > > > processes via Task Manager but I have not seen anything that looks
> > > > > out of place. In fact after the connection the system idle
process
> > > > > is usually at 99%.
> > > > >
> > > > > I've checked my Scheduled Tasks and there are none. The only time
> > > > > I have observed this spontaneous connection is in late morning.
> > > > >
> > > > > I use Norton Antivirus and update it every week religiously.
> > > > >
> > > > > This looks and feels like my computer has been hacked and is
> > > > > being used. Is there any legitimate reason this could be
> > > > > happening?
> > > > >
> > > > > What else can I do to find out why this thing is running and to
> > > > > stop it?
> > > > >
> > > > > Thanks,
> > > > > Zaster
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

 

[Greg]

Archived from groups: microsoft.public.windowsnt.misc (More info?)

Do you have Outlook Express or Outlook or any messenger
services running that might be performing a scheduled
email search?

 

[Guest]

Archived from groups: microsoft.public.windowsnt.misc (More info?)

"Greg" <anonymous@discussions.microsoft.com> wrote in message
news:2cdd01c4ab21$08e1c220$a501280a@phx.gbl...
> Do you have Outlook Express or Outlook or any messenger
> services running that might be performing a scheduled
> email search?

I use Outlook Express only for reading newsgroups. No
messenger services. I use Netscape for my email and web
browsing. I have used these apps for at least a year or
more and have not seen this problem until recently (about
two weeks).

I have noticed that it seems to happen within a few minutes of
when I terminate a connection session.

Maybe the best thing is to try the ZoneAlarm as suggested
above.

 

[Bruce]

Archived from groups: microsoft.public.windowsnt.misc (More info?)

Billy Smith wrote:
> I'm running NT4.0 with a modem Internet connection. The system works
> well but lately I've noticed something kind of scary. Without any
> user input, my Internet connection spontaneously starts. The small
> "now connecting" box comes up and the modem is dialed just as
> it does when I start it by clicking on the startup icon.
>
> I have let such a logon proceed and then looked at applications and
> processes via Task Manager but I have not seen anything that looks
> out of place. In fact after the connection the system idle process
> is usually at 99%.
>
> I've checked my Scheduled Tasks and there are none. The only time
> I have observed this spontaneous connection is in late morning.
>
> I use Norton Antivirus and update it every week religiously.
>
> This looks and feels like my computer has been hacked and is
> being used. Is there any legitimate reason this could be
> happening?
>
> What else can I do to find out why this thing is running and to
> stop it?
>
> Thanks,
> Zaster
>
>
go to a command prompt and use netstat to find out who you are
connecting to.