constant data transfer to internet - worm? trojan?

[Mike Sutherland]

Sorry if I sound a bit green but I have a problem with my PC when connected
to the internet.

I am using XP Pro and when online with no programmes (apparently) running,
there is constant data traffic. I'm using broadband. Using task manager,
there doesn't seem to be any programmes running. Is it possible that I have
a 'trojan' or 'worm'? How can I check. I use norton internet
security/anti-virus and when I run a sweep, it finds nothing?

 

[Duane Arnold]

Sorry if I sound a bit green but I have a problem with my PC when
connected to the internet.

I am using XP Pro and when online with no programmes (apparently)
running, there is constant data traffic. I'm using broadband. Using
task manager, there doesn't seem to be any programmes running. Is it
possible that I have a 'trojan' or 'worm'? How can I check. I use
norton internet security/anti-virus and when I run a sweep, it finds
nothing?

You can use Active Ports nad PRCview both are free use Google.

You may want read the link.

http://www.windowsecurity.com/articles/Hidden_Backdoors_Trojan_Horses_and
_Rootkit_Tools_in_a_Windows_Environment.html

You may want to read the link.

http://www.uksecurityonline.com/husdg/windowsxp.php

Duane

 

[Bart Bailey]

In Message-ID:<[email protected]> posted on Sat, 11

Using task manager,
there doesn't seem to be any programmes running. Is it possible that I have
a 'trojan' or 'worm'? How can I check. I use norton internet
security/anti-virus and when I run a sweep, it finds nothing?

You could run this startup analyzer:
http://www.tomcoyote.org/hjt/
and see what it reports.
Here's an explanation of the results:
http://www.spywareinfo.com/~merijn/htlogtutorial.html

 

[US Route 9 West]

if there is indeed no traffic when you are disconnected, I think you
may find that one of the tests suggested above will give you a better
idea.

My experience here when that happens is that there is 'activity' from
RR and it has been something RR can assist with. They know if they
have problems and can tell you what has been their experience in your
area.

Our locals indeed had a virus problem that was propagating user
systems....and they needed to get a handle on it and did.

I do not remember the particulars, but a phone call may be in order.
No sense stressing over it.

You may want to disable the NIC and see what happens while you are
connected. It may indeed be within your system after all.

Do you have any equipment other than the cable modem attached to the
computer?

Joe

 

[Mike Sutherland]

Joe,

No - nothing is connected other than the USB modem between the PC and phone
line.

Mike

 

[Clay]

Sorry if I sound a bit green but I have a problem with my PC when connected
to the internet.

I am using XP Pro and when online with no programmes (apparently) running,
there is constant data traffic.

How did you determine that "there is constant data traffic"?
Is it because of your modem's data transfer activity light?
If so, I wouldn't get my shorts in a bundle over that.

I'm using broadband. Using task manager,
there doesn't seem to be any programmes running. Is it possible that I have
a 'trojan' or 'worm'? How can I check. I use norton internet
security/anti-virus and when I run a sweep, it finds nothing?

It's certainly possible that you have a malware problem but you may be
jumping to conclusions... got all your OS patches? Latest virus
definitions?

Consider getting a router.

 

[US Route 9 West]

nicely put.
Joe

How did you determine that "there is constant data traffic"?
Is it because of your modem's data transfer activity light?
If so, I wouldn't get my shorts in a bundle over that.


It's certainly possible that you have a malware problem but you may be
jumping to conclusions... got all your OS patches? Latest virus
definitions?

Consider getting a router.

 

[Mike Sutherland]

I'm assuming data traffic as the two pc icons on the bottom of the screen
(right) are constantly lit. Double clicking on this shows continuous
increase in number of bytes transferred (both sent and received - at a ratio
of approx 3 sent to 2 received).

Alll windows updates and Norton updates are bang up to date.

 

[Route 9w]

the 3 to 2 ratio indicates something is astray.
without doing anything else, and to keep it at a high level, I still
suggest a call to RR. They have been there.
Joe