Forums | Other (Public) | How can I tell which program keeps dialling up? | Watch |
Author | Topic |
jseabrook Tl Posts: 4 United Kingdom | Posted - 3/26/2004 3:02:03 PM Recently, on start up my PC always connects to the internet. How can I find out which program is doing this? |
v.Richard Tl Posts: 6222 USA | Posted - 3/26/2004 3:33:53 PM A tool to inspect your registry's auto-run items (I use the freeware RegCleaner V4.3 - it has a 'startup' tab that quickly allows you to see what will run when Windows starts. (This freeware may be hard to find as I think it's been commercialized now as shareware with a different name. You can also do it with Windows' included regedit, but you've got to know what keys (LocalMachine/Run, CurrentUser/Run, StartMenu, etc.) to look at. Modemlog will show what's being dialed (you may need to put e1 in modem init string - extra settings) Software like Ad-Aware - will check your system for malware/trojans including dialers. Then, individual programs (like Explorer/browsers, e-mail, etc.) can have options/preferences set to automatically dial a connection.... Aloha! Richard. Edited by - v.Richard on 3/26/2004 3:34:47 PM |
charles Tl Posts: 5879 USA | Posted - 3/27/2004 2:15:43 AM What OS are you using? Have you installed any new software? Might go to run type in msconfig and go to the startup folder.This is a known problem with Norton 2004. The reg file would be Local machine\software\microsoft\windows\currentversion\ Go down and check the run and run service for any program that is pointing to the dialup. http://www.mvps.org/sramesh2k/Autodial.htm HijackThis and StartupList are good programs also. |
mainbuss Tl Posts: 145 USA | Posted - 3/27/2004 11:57:55 PM Edited by - mainbuss on 7/10/2004 10:41:54 PM |
jseabrook Tl Posts: 4 United Kingdom | Posted - 3/28/2004 11:28:36 AM Thanks to the three of you for all your advice. I haven't found out what program is doing it, but it seems there are a couple of spyware programs on my PC (cmesys,loadqm, possibly more!). Also installed new version of Realplayer recently and think this may be the cause. However, the simple solution of setting "never dial a connection" fixes the problem. Will look into installing a firewall. Cheers, |
jseabrook Tl Posts: 4 United Kingdom | Posted - 3/28/2004 1:02:47 PM I found the problem, it's the winlogon.exe file that's keeps connecting. I've removed it from startup in msconfig. I had a quick surf and it appears that it might be a worm taking over the function of a real Windows file. It seems to have been created on 3/3/04 so it can't be an original win98 install file. However, Norton with up to date virus files does not detect it. Does anyone know what the legit winlogon does? Thanks, I know I'm probably in the wrong forum now, but since I'm here and you're all so much more knowledgeable than me about computers & stuff ... |
mainbuss Tl Posts: 145 USA | Posted - 3/28/2004 1:34:05 PM Edited by - mainbuss on 7/10/2004 10:42:18 PM |
charles Tl Posts: 5879 USA | Posted - 3/28/2004 6:39:22 PM Download ad-aware and update it,run it to remove gator and other spyware.After you install look to the upper right,second icon from the right,click to update. Go to run,type in msconfig,go to the startup folder take the check out of realplayer,restart windows. |
mainbuss Tl Posts: 145 USA | Posted - 3/29/2004 4:16:39 AM Edited by - mainbuss on 7/10/2004 10:42:34 PM |
jseabrook Tl Posts: 4 United Kingdom | Posted - 3/29/2004 10:35:29 AM Cheers, I submitted the winlogon.exe file to Norton & they report it is Adware not a virus. It was much larger than 17k. I hadn't realised how much snooping was going on my PC, I knew Gator was there because the form filler is useful, but not hte others. Anyway, will download Ad-aware and tidy PC up. Thanks again for your help. |
Click Here To Close Thread, Administrators & Moderators Only.
Show All Forums |