Router reveals port activity

[RAH]

Hi,
I access the internet from my laptop via a Netgear wireless router. Shortly
after a connection is made between laptop and router the dialup modem which
is attached to the router dials up automatically without me getting as far
as starting OE6 or IE6.

I discovered the following entry in the router log:
Dial on demand, XXX.XXX.XXX.X:3014 to XXX.XX.XXX.XX:53 (X's are the IP
address of the router - i think).

Can anyone tell me if there is anything untoward in this behaviour such as a
trojan or virus, if it is normal for this to occur or if some background
programme is attempting an auto-update or similar?

I have AVG antivirus, Ad-Aware and Spybot installed.

Thanks in adance.

RAH

 

[Rebecca Chen [MSFT]]

Hi RAH,

Thank you for posting here!

Technically speaking, it is a normal behavior if certain application or
service which is going to access the internet. For example, if you turn on
Automatic Update, the process will require accessing the Internet to check
if there is some new update available.

However, please know if Windows is hacked, it is also possible that
ill-disposed program wants to access to the Internet. Therefore, I would
like to provide the following recommendations:

1. Install a firewall
Install the firewall to prevent the attack. In addition, you can see what
kind of program wants to access the Internet and take the corresponding
action to allow or disable it.

2. Clean Boot
Refer to the following KB to perform a Clean Boot to disable third-party
applications and service.

Q310353 How to Perform a Clean Boot in Windows XP
http://support.microsoft.com/support/kb/articles/q310/3/53.asp

Start the application for router and see if there is a request to access
the Internet. If there is no request to Internet, most possibly, we can say
it was a third-party application request.


Further questions, let us get in touch.

Have a nice day!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.