Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Computer dialing itself


  • Please log in to reply
11 replies to this topic

#1 CO Girl

CO Girl

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Location:Chicago
  • Local time:09:41 AM

Posted 18 November 2004 - 01:50 PM

My computer is regularly dialing the internet on its own. Blocking all internet activity with ZoneAlarm seems to work, but I'm stumped as to what program is intiating the dialing. :thumbsup:

Ran AdAware and Spybot (with newest updates) and neither found a thing. Am fully immunized with Spybot and Spyware Blaster. Have turned off all auto-update features, including Windows update.

Let my son download Shockwave and ended up with a new Yahoo toolbar as well. Uninstalled that, but maybe something else snuck in with the download?

Could you please check my HJT log and see if it shows anything? Thanks!

Oops! :flowers: Forgot to show hidden Windows files....have edited post to show HJT log with this corrected.

Logfile of HijackThis v1.98.2
Scan saved at 12:53:15 PM, on 11/18/2004
Platform: Windows ME (Win9x 4.90.3000A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\BCMDMMSG.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\PROGRAM FILES\ADAPTEC\GOBACK\GBPOLL.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\SYSTEM\DEVLDR16.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\CREATIVE\SBLIVE\AUDIOHQ\AHQTB.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\SK9910DM.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\POPROXY.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\PROGRAM FILES\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\AIO\HP OFFICEJET 7100 SERIES\BIN\HPOGRP07.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\AIO\SHARED\BIN\HPOEVM07.EXE
C:\WINDOWS\SYSTEM\HPOIPM07.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\AIO\SHARED\BIN\HPOSTS07.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\AIO\SHARED\BIN\HPOFXM07.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\HIJACK THIS\HIJACKTHIS.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP SHARE-TO-WEB\HPGS2WNF.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.att.net/ie4/search/index.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.att.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.att.net
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
F1 - win.ini: load=HPLJSW.EXE
O2 - BHO: CCHelper Class - {0CF0B8EE-6596-11D5-A98E-0003470BB48E} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER\CCHELPER.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: Pa&nicware Pop-Up Stopper - {7E82235C-F31E-46CB-AF9F-1ADD94C585FF} - C:\PROGRAM FILES\PANICWARE\POP-UP STOPPER\PSTOPPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [BCMDMMSG] BCMDMMSG.exe
O4 - HKLM\..\Run: [Hot Key Kbd 9910 Daemon] SK9910DM.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\SYSTEM\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [AudioHQ] C:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
O4 - HKLM\..\Run: [NAV DefAlert] C:\PROGRA~1\NORTON~1\DEFALERT.EXE
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [Norton eMail Protect] C:\Program Files\Norton AntiVirus\POPROXY.EXE
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [devldr16.exe] C:\WINDOWS\SYSTEM\devldr16.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [GoBack Polling Service] C:\Program Files\Adaptec\GoBack\GBPoll.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: HPAiODevice(hp officejet 7100 series) - 1.lnk = C:\Program Files\Hewlett-Packard\AiO\hp officejet 7100 series\Bin\hpogrp07.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.att.net
O16 - DPF: {6F750200-1362-4815-A476-88533DE61D0C} (Ofoto Upload Manager Class) - http://www.ofoto.com/downloads/BUM/BUM_WIN_IE_1/axofupld.cab

Edited by CO Girl, 18 November 2004 - 02:00 PM.


BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,659 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:10:41 AM

Posted 18 November 2004 - 09:50 PM

Nothing here...do you use dialup to connect to the internet?

#3 CO Girl

CO Girl
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Location:Chicago
  • Local time:09:41 AM

Posted 19 November 2004 - 11:18 AM

Yep - still in the dark ages and using a modem. :thumbsup:

Computer intiates dial-up at strange intervals...sometimes when no one is at it, other times when we're using software that is (as far as I know) totally unrelated to the internet.

Also, sometimes when I'm on the web, a page I had no intention of going to just pops up. It makes me a little nervous, but usually I figure that I accidentally clicked a link.

#4 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,659 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:10:41 AM

Posted 19 November 2004 - 12:21 PM

Go into the properties of dialup networking connection and check to see if you have it set to dial as needed.

#5 CO Girl

CO Girl
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Location:Chicago
  • Local time:09:41 AM

Posted 19 November 2004 - 12:27 PM

Here's what I found under Dial-Up Networking>Properties>Dialing (for the AT&T Connection):
This is the default internet connection > always dial my default connection
Enable idle disconnect
Disconnect when connection may not be needed

Didn't see anything that said "dial as needed." "Connect automatically" (under Security tab) is not checked.

Also have a Microsoft Internet Referral Service icon in there.
Am I looking in the right place?

Edited by CO Girl, 19 November 2004 - 12:30 PM.


#6 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,659 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:10:41 AM

Posted 19 November 2004 - 02:42 PM

Open up internet exploirer and go to tools and then internet options.


Then Click on the connections tab. Tell me what it says on that screen

#7 CO Girl

CO Girl
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Location:Chicago
  • Local time:09:41 AM

Posted 19 November 2004 - 04:17 PM

There are three choices:

Never dial a connection
Dial whenever a connection is not present
Always dial my default connection (currently selected)

Also selected: Perform system security check before dialing



I probably want to change that to never dial a connection...right?

#8 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,659 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:10:41 AM

Posted 19 November 2004 - 04:22 PM

Yeah i think that may be the cause

#9 CO Girl

CO Girl
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Location:Chicago
  • Local time:09:41 AM

Posted 19 November 2004 - 04:34 PM

Thanks Grinler. You've taken time out of your day to help me again--I guess there are still heroes in this crazy world! :thumbsup:

I'll give it a shot, wait a few days and see if my computer still has a mind of its own. Just when I thought I was the one in control!

#10 CO Girl

CO Girl
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Location:Chicago
  • Local time:09:41 AM

Posted 30 November 2004 - 12:03 PM

Here's a follow-up in case someone stumbles across this topic in the future...

Changing the internet options on IE to "never dial" worked like a charm. So far the computer has behaved itself and only initiates the modem when I ask it to. :thumbsup:

#11 JEservices

JEservices

    helping hand


  • Members
  • 1,700 posts
  • OFFLINE
  •  
  • Location:Texas
  • Local time:09:41 AM

Posted 30 November 2004 - 12:13 PM

Thank you very much for telling everyone that it has worked for you.

Another thing that you may want to do, is restart the computer to assure that the change has taken effect.
We are all curious like a cat. We wonder, we ask, we learn.
Please post back when a suggestion works, so that others may learn.

#12 CO Girl

CO Girl
  • Topic Starter

  • Members
  • 20 posts
  • OFFLINE
  •  
  • Location:Chicago
  • Local time:09:41 AM

Posted 01 December 2004 - 11:15 AM

Thank you very much for telling everyone that it has worked for you.

Just wanted to help in any little way I can, in return for all the help I've received here.

Restarted the computer immediately soon making the change, and no problems in 11 days! :flowers:

Have been reading your thread on hidden links...and think that may explain some of my problems with webpages suddenly popping up (seemingly unitiated) ?? Keep the great information and fun coming...this site has 5000+ members for a reason!! :thumbsup:

Thanks again for the advice and assistance.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users