Modemsite's Forum56 - The Modem Board
Main | profile | register | search | help | Ad-free Login
Forums | Other (Public) | How can I tell which program keeps dialling up?    Watch  
Author Topic
jseabrook
Tl Posts:
4

United Kingdom
Posted - 3/26/2004 3:02:03 PM  Show Profile  Email Poster  Edit Message
Recently, on start up my PC always connects to the internet. How can I find out which program is doing this?
v.Richard
Tl Posts:
6222

USA
Posted - 3/26/2004 3:33:53 PM  Show Profile  Email Poster  Edit Message  v.Richards Homepage
A tool to inspect your registry's auto-run items (I use the freeware RegCleaner V4.3 - it has a 'startup' tab that quickly allows you to see what will run when Windows starts. (This freeware may be hard to find as I think it's been commercialized now as shareware with a different name. You can also do it with Windows' included regedit, but you've got to know what keys (LocalMachine/Run, CurrentUser/Run, StartMenu, etc.) to look at.

Modemlog will show what's being dialed (you may need to put e1 in modem init string - extra settings)
www.modemsite.com/56k/modemlog.asp
www.modemsite.com/56k/initmagic.asp

Software like Ad-Aware - will check your system for malware/trojans including dialers.
http://download.com.com/3000-2144-10045910.html?part=69274&subj=dlpage

Then, individual programs (like Explorer/browsers, e-mail, etc.) can have options/preferences set to automatically dial a connection....

Aloha! Richard.

Edited by - v.Richard on 3/26/2004 3:34:47 PM

charles
Tl Posts:
5879

USA
Posted - 3/27/2004 2:15:43 AM  Show Profile  Email Poster  Edit Message
What OS are you using? Have you installed any new software? Might go to run type in msconfig and go to the startup folder.This is a known problem with Norton 2004.
The reg file would be
Local machine\software\microsoft\windows\currentversion\

Go down and check the run and run service for any program that is pointing to the dialup.

http://www.mvps.org/sramesh2k/Autodial.htm

HijackThis and StartupList are good programs also.
http://www.spywareinfo.com/~merijn/downloads.html
Edited by - charles on 3/27/2004 2:50:59 AM

mainbuss
Tl Posts:
145

USA
Posted - 3/27/2004 11:57:55 PM  Show Profile  Email Poster  Edit Message

Edited by - mainbuss on 7/10/2004 10:41:54 PM
jseabrook
Tl Posts:
4

United Kingdom
Posted - 3/28/2004 11:28:36 AM  Show Profile  Email Poster  Edit Message
Thanks to the three of you for all your advice.

I haven't found out what program is doing it, but it seems there are a couple of spyware programs on my PC (cmesys,loadqm, possibly more!). Also installed new version of Realplayer recently and think this may be the cause. However, the simple solution of setting "never dial a connection" fixes the problem.

Will look into installing a firewall.

Cheers,
Just

jseabrook
Tl Posts:
4

United Kingdom
Posted - 3/28/2004 1:02:47 PM  Show Profile  Email Poster  Edit Message
I found the problem, it's the winlogon.exe file that's keeps connecting. I've removed it from startup in msconfig. I had a quick surf and it appears that it might be a worm taking over the function of a real Windows file. It seems to have been created on 3/3/04 so it can't be an original win98 install file. However, Norton with up to date virus files does not detect it. Does anyone know what the legit winlogon does?

Thanks, I know I'm probably in the wrong forum now, but since I'm here and you're all so much more knowledgeable than me about computers & stuff ...
Just

mainbuss
Tl Posts:
145

USA
Posted - 3/28/2004 1:34:05 PM  Show Profile  Email Poster  Edit Message

Edited by - mainbuss on 7/10/2004 10:42:18 PM
charles
Tl Posts:
5879

USA
Posted - 3/28/2004 6:39:22 PM  Show Profile  Email Poster  Edit Message
Download ad-aware and update it,run it to remove gator and other spyware.After you install look to the upper right,second icon from the right,click to update.
Go to run,type in msconfig,go to the startup folder take the check out of realplayer,restart windows.

http://majorgeeks.com/download.php?det=506

mainbuss
Tl Posts:
145

USA
Posted - 3/29/2004 4:16:39 AM  Show Profile  Email Poster  Edit Message

Edited by - mainbuss on 7/10/2004 10:42:34 PM
jseabrook
Tl Posts:
4

United Kingdom
Posted - 3/29/2004 10:35:29 AM  Show Profile  Email Poster  Edit Message
Cheers, I submitted the winlogon.exe file to Norton & they report it is Adware not a virus. It was much larger than 17k. I hadn't realised how much snooping was going on my PC, I knew Gator was there because the form filler is useful, but not hte others. Anyway, will download Ad-aware and tidy PC up.

Thanks again for your help.

Click Here To Close Thread, Administrators & Moderators Only.

Show All Forums |