Please Sir / Madam, HELP ME (About Modem Bytes)

[Shahzad]

Respected Sir / Madam,

I have installed NORTON SYSTEM WORKS 2003, which also
contains NORTON ANTI VIRUS 2003. I always keep my
Antivirus upto date, I use to scan my computer with
updated antivirus and include hidden files also in scan
(I mean I perform full system scan), I have also disabled
Windows automatic update. Now let me come to the point,
some times when I connect my Internet, Before I start any
application like MSN, or Internet explorer(I dont start
any Internet application like Internet explorer and MSN
etc), my modem contineously sends and receives bytes
after some interval of half second. Some times when
Internet explorer downloads any web site and after
complete dowonload of site this procedure continues
(Sending and receiving of Bytes). I want to know your
point of view what kind of activity is this? I have come
to know that Norton 2003 always detects any harmfull
processes running in system (Because it scans
automatically in system backend) like any hacking file,
norton detects that file, but in my system norton didn't
find any harmful file of this kind even this version of
norton2003 is up to date. I have also enabled WINDOWS XP
built in fire wall too. Please tell me what kind of
activity is this that modem sometimes contineously sends
and receives bytes, is this some hacking or any harmfull
procedure for my computer???? PLEASE GUIDE ME and HELP ME
as u can, I am really very thankfull for ur kindness.


Waiting for reply.
Regards,
Shahzad.

 

[D.Currie]

Respected Sir / Madam,

I have installed NORTON SYSTEM WORKS 2003, which also
contains NORTON ANTI VIRUS 2003. I always keep my
Antivirus upto date, I use to scan my computer with
updated antivirus and include hidden files also in scan
(I mean I perform full system scan), I have also disabled
Windows automatic update. Now let me come to the point,
some times when I connect my Internet, Before I start any
application like MSN, or Internet explorer(I dont start
any Internet application like Internet explorer and MSN
etc), my modem contineously sends and receives bytes
after some interval of half second. Some times when
Internet explorer downloads any web site and after
complete dowonload of site this procedure continues
(Sending and receiving of Bytes). I want to know your
point of view what kind of activity is this? I have come
to know that Norton 2003 always detects any harmfull
processes running in system (Because it scans
automatically in system backend) like any hacking file,
norton detects that file, but in my system norton didn't
find any harmful file of this kind even this version of
norton2003 is up to date. I have also enabled WINDOWS XP
built in fire wall too. Please tell me what kind of
activity is this that modem sometimes contineously sends
and receives bytes, is this some hacking or any harmfull
procedure for my computer???? PLEASE GUIDE ME and HELP ME
as u can, I am really very thankfull for ur kindness.


Waiting for reply.
Regards,
Shahzad.

Two immediate thoughts. You could have a program that's set to look for
updates automatically. Only you would know what programs you have on your
computer, and if they might want to look for updates. It could very well be
Norton that's looking for the updates.

Or it could be some sort of spyware.

 

[Shahzad]

Respected Friend,
If this is SPYWARE than whats the solution of removal of
S/W? Does norton treats it as a Trojen or not? Waiting
for reply,
THANKS for Your kindness.
Regards,
Shahzad.

 

[Rick]

Any number of applications installed on your computer could be
Internet-aware and configured to check for updates on some pre-determined
schedule. Norton, itself, will automatically check for updates whenever it
detects an active Internet connection. There is also a certain amount of
'housekeeping' activity between your computer and your ISP each time you log
on.

Likewise, you may have a trojan or spyware on your computer that is sending
off information and this is the reason your modem activities light are
active. A spyware scan utility like Lavasoft's AdAware
http://www.lavasoftusa.com/ or SpyBot http://security.kolla.de/ is useful
here.

I believe System Works does not include a firewall so I would recommend you
update to Norton Internet Security http://www.symantec.com/sabu/nis/nis_pe/
(if you are happy with Norton), or download a free firewall that monitors
both inbound and OUTBOUND connections by application (like Sygate
http://smb.sygate.com or ZoneAlarm http://www.zonelabs.com/). Notice the
modem lights flashing when you don't expect it . . . watch the status
screens of these firewalls and find out which programs are communicating.

Caveat: Do not run more than one firewall at a time. If you install and
run a third-party firewall, disable XPs Internet Connection Firewall on that
interface. They get in each others' way.

Rick

 

[Shahzad]

Respected Sir,
First I would like to thank u for ur kindness, please let
me know why should I disable windows XP builtin firewall
if I install any other firewall.
If I install any firewall now then will it tell me about
present illegal outgoing data (hacking processes) from my
computer? or should I format my hard-disk?
Waiting for reply,
Regards,
Shahzad.

 

[Rick]

please let
me know why should I disable windows XP builtin firewall
if I install any other firewall.
If I install any firewall now then will it tell me about
present illegal outgoing data (hacking processes) from my
computer? or should I format my hard-disk?

A firewall works as an intermediary between your Internet connection and
your computer. It examines the traffic coming into your computer to make
sure it meets certain filtering rules. If the traffic does not meet those
rules it is blocked and not permitted access. Most firewalls also examine
traffic that is outbound from your computer, making sure that it is
authorized. If not, it is also blocked and you, the user, are notified. The
built-in firewall that comes with XP only examines inbound traffic,
therefore I highly recommend a third-party solution like Sygate. However,
the choice of firewalls is your choice and it is imperative that you have a
firewall operating to protect your system.

A software-based firewall uses a lot of resources on your computer examining
every incoming and outgoing packet. The use of two firewalls will slow your
computer down without any increased protection. In all probability, your
protection might even go down as the rule-sets (or filtering rules)
interfere with one another. Two firewalls also present a troubleshooting
nightmare when trying to resolve networking problems (which one is blocking
a necessary protocol, for example?) It is far better to properly configure
one firewall and understand how it is actively protecting your system.

That said, a firewall is not a panacea for keeping your system free of
'hacking processes'. I highly suggest you use a good AV scanner followed by
scans for spyware and adware. There are numerous examples of malware that
once installed, can disable your AV and firewall protection . . . perhaps
without your knowledge that you have no more protection.

Perhaps if you told us a few of the details of these 'hacking processes' we
might be able to help you eliminate them.

Rick