Self Dialling Modem

Printable View

September 19th, 2004, 04:10 PM
Davesworld

Self Dialling Modem

My wifes computer constantly self dials up the internet. It is a pain in the rear end. She cannot leave the computer turned on as the moment you walk away it dials up again. I have done exhaustive searches with Spybot, adaware & manually searched for diallers - no luck. It seems to be worse when it is connected on our home network - when it is connected we share with ICS on my computer. The computer is running XP(sp1) & a netcom internal modem.
I have even set IE to never dial a connection - yet it still dials. I am determined to find out why this machine keeps dialling but I am exhausted for ideas.
I am sure somebody has struck this before.
September 19th, 2004, 10:13 PM
silencio

After it connects one of these times get on it and run "CMD" Then run "netstat -a" in that prompt and post the results here or look them up yourself at samspade.org

That should tell you what the machine is trying to connect to.
September 20th, 2004, 05:09 PM
mrpickle

Beware of ActiveX

I've seen several cases where the modem auto dials the ISP.

When Ad-Aware or SpyBot S&D hasn't found the culprit, check the "download programs" area. (C:\WINDOWS\Downloaded Program Files)

This windows is also accessible from IE: Tools -> Internet Options -> Temporary Internet Settings * Settings -> "View Objects"

You will see several installed objects that should have some relevance to programs installed on your machine.

Look into the objects that are a string of numbers. Highlight and [right-click] -> 'Properties'

Check the "CODEBASE" for suspicious websites and then check the [Dependancy] tab for additional information.

If you're unsure of a suspicious website, enter the root (www.____.com) of the site or google the domain.

Once suspicious object is found, you can delete it from your system like any other file.

Another place to look is in the startup settings.
From START -> Run, type: msconfig
click on the last tab [startup]
look for suspicious listings (i.e. dialers, porn, etc)

** Use at your own risk **
September 21st, 2004, 03:14 AM
Davesworld

When it dials it dials up the normal ISP & just stops at the home page

There is nothing under view objects as I have put Window Washer on this machine to clear out all the debris

Checked the downloaded programs area - all clear too

I did check the MS config once before but have not checked for a while
I might go back & have another look

She keeps a lot of old emails on her machine. Does anyone think the old emails could be a problem
September 21st, 2004, 06:23 AM
NooNoo

run a highjackthis log, just in case.
September 21st, 2004, 06:28 AM
confus-ed

Quote:

Originally Posted by Davesworld

. It seems to be worse when it is connected on our home network - when it is connected we share with ICS on my computer. ..

Check 'em all then !!!! ;) as you are using ics does that enable modem sharing by default ? so it mightn't be spyware at all ? perhaps she has something that is wanting to synchronise or update via your pc ?
September 21st, 2004, 08:37 AM
Stalemate

Quote:

Originally Posted by confus-ed

Check 'em all then !!!! ;) as you are using ics does that enable modem sharing by default ? so it mightn't be spyware at all ? perhaps she has something that is wanting to synchronise or update via your pc ?

Precisely what I was thinking.

Until you pinpoint the source, I recommend you remove the password from the dialing setup so that it makes it required once again.

If the other PC has anything which also requires being updated from the Internet, the dialup will be attempted.
September 21st, 2004, 03:57 PM
Davesworld

Removing the password has stopped it going anywhere for the time being, however it still dials up.

How do I run a highjackthis log?

The only program that requires internet updating is the anti virus - but I have disabled the updating - the problem started before the Auto Antivirus updating was put on the machine

I know it is the wifes computer that is the dialing culprit as the constant dial up
only starts when her computer is connected to the network. Also if her computer is plugged directly into the phone line the dial up starts again.

This sort of dial up problem has happened to alot of people I know. In sheer frustration some people I know have reloaded their computer - but that's the cowards way out - I am determined to find the cause

Keep the ideas comming please
September 21st, 2004, 08:55 PM
houseisland

Hi,

Another place to look is in the Task Manager -- right click on the bar along the bottom of your desk top -- choose Task Manager from the menu.
September 21st, 2004, 11:52 PM
Stalemate

I wonder if Windows Update could launch a connection request?

Anyone know for sure?
September 22nd, 2004, 02:09 AM
freddy

Quote:

Originally Posted by a d e p t

I wonder if Windows Update could launch a connection request?

Anyone know for sure?

yes if auto update is set on , (as req in the new version on xp) however it would be set for a specific time,

i think it is another machine on the network , that is req internet access , and because of shareing ,,is going thru this one.

do the same checks you have done , on the other machines in the network
September 22nd, 2004, 02:46 AM
Atodini

Quote:

Originally Posted by Davesworld

My wifes computer constantly self dials up the internet. It is a pain in the rear end. She cannot leave the computer turned on as the moment you walk away it dials up again. I have done exhaustive searches with Spybot, adaware & manually searched for diallers - no luck. It seems to be worse when it is connected on our home network - when it is connected we share with ICS on my computer. The computer is running XP(sp1) & a netcom internal modem.
I have even set IE to never dial a connection - yet it still dials. I am determined to find out why this machine keeps dialling but I am exhausted for ideas.
I am sure somebody has struck this before.

You say you're using ics. There could therefore be a dialler on your computer, as ics enables your computer to control the internet connection.... Does it still try to auto dial when your machine is physically disconnected?

Why not run hijack this on both computers and post the logs? - then we can see if there's anything untoward on either machine.

John
September 22nd, 2004, 02:49 AM
freddy

Quote:

Originally Posted by Atodini

You say you're using ics. There could therefore be a dialler on your computer, as ics enables your computer to control the internet connection.... Does it still try to auto dial when your machine is physically disconnected?

Why not run hijack this on both computers and post the logs? - then we can see if there's anything untoward on either machine.

John

i sid the same thing on the post above

think it is another machine on the network , that is req internet access , and because of shareing ,,is going thru this one.
September 22nd, 2004, 03:00 AM
Atodini

Quote:

Originally Posted by freddy

i sid the same thing on the post above

think it is another machine on the network , that is req internet access , and because of shareing ,,is going thru this one.

Sorry Freddy so you did, cross post!! I had this one open for a while - got distracted during posting it!! :thumbs2:

John
September 22nd, 2004, 03:18 AM
NooNoo

how to sort out spyware and link to hijack Diallers are a nuisance. Follow the suggestions in the thread and then post the hijack logs for both machines AFTER you have completed the recommendations.