Something keeps trying to establish dial-up connection in Windows XP

[Raj Johal]

Something in my Windows XP keeps trying to extablish a
dialup connection. Anyone has any ideas. In Taskmanager,
if I remove the service rasautou.exe, the problems
disappears for that session, until I reboot.

 

[Guest]

Raj, just a thought, but go to Tools, Network Connections and check the "Tasks" box over on the left to see if you've somehow checked auto dial-up in either a new Connection or the present one.

 

[Guest]

If you have your mail client configured to automatically log in and check for mail, you will get this. Copy and paste this page
http://www.answersthatwork.com/Tasklist_pages/tasklist_r.ht
Jeff
----- Raj Johal wrote: ----

Something in my Windows XP keeps trying to extablish a
dialup connection. Anyone has any ideas. In Taskmanager,
if I remove the service rasautou.exe, the problems
disappears for that session, until I reboot

 

[Wÿrm]

Something in my Windows XP keeps trying to extablish a

dialup connection. Anyone has any ideas. In Taskmanager,
if I remove the service rasautou.exe, the problems
disappears for that session, until I reboot.

Besides already suggested auto dial being checked or e-mail client trying to
log in for e-mails, one possible reason might be spyware etc. things.

If it wasn't autodial or e-mail client maybe these steps might help you?

Here's 5 steps that EVERY computer owner should do (or have, for last two
steps) if they want to make sure their system is not infested with spyware,
trojans and viruses... And even these steps are not 100% perfect.

1. first download download spybot seek & destroy from
http://security.kolla.de
install it, UPDATE it, and RUN it...

2. second, AdAware from www.lavasoft.de install it, UPDATE it, RUN
it...
--- sofar you should have quite spyware free system not always 100% free
though ---


3. third, download spywareblaster
http://www.javacoolsoftware.com/spywareblaster.html install it, UPDATE it
and RUN it...

--- after this you should have system that's protected from some spyware
stuff, not ALL though ---


4. get yourself virus killer if you do not have... www.grisoft.com has free
virus killer it you bother dig up more their site to download free version,
install, UPDATE and run it...

--- after this your system should be protected from most viruses ---


5. get yourself FIREWALL if you do not have it... Usually free firewall like
ZoneAlarm (www.zonelabs.com) will do just fine...

--- and after this step, you should beable to see when something in your
system tries to connect outside from your system etc ---


1st and 2nd steps are both good programs, but I never trust only one of them
myself because I am bit too paranoid with my network security. So I run
both.. both are good, but nothing is perfect so better be sure...

spywareblaster "protects" your system from spyware etc. so it's also good
idea to run it also...

Virus killer and firewall are usually VERY important part, If you have winXP
you might have it's inbuilt firewall on, that helps some, but it does not
show outbound connections that are sometimes very good to "notice"

and remember to UPDATE/RUN those programs regularly just to stay safe
side on things...

 

[MAP]

-----Original Message-----
Something in my Windows XP keeps trying to extablish a
dialup connection. Anyone has any ideas. In Taskmanager,
if I remove the service rasautou.exe, the problems
disappears for that session, until I reboot.
.

You may have a new variant of this spyware,follow Wyrm's
advice



Overview
Category: Dialer: Software that dials a phone number.
Some dialers connect to local Internet Service Providers
and are beneficial as configured. Others connect to toll
numbers without user awareness or permission.

Similar Pests: Dialer
Origins
Date of Origin: September, 2003
Place of Origin: Italy
Distribution
Prevalence: RasDialer: Fewer than 5 per 100,000 pest
reports More Info

Clot Factor: RasDialer: (insufficient data)
The "Clot Factor" is a measure of how much a pest "gums
up" a machine by adding registry entries, files, and
directories. As more objects are placed in a machine,
manual removal becomes more difficult and more error-
prone.

Operation
Storage Required: at least 21KB
Detection and Removal
Automatic Removal: PestPatrol detects this.

PestPatrol removes this.



Manual Removal: Follow these steps to remove RasDialer
from your machine. Begin by backing up your registry and
your system, and/or setting a Restore Point, to prevent
trouble if you make a mistake.
Stop Running Processes:

Kill these running processes with Task Manager:

ricette.exe


Remove Files:

Remove these files (if present) with Windows Explorer:

ricette.exe

 

[Guest]

----- Raj Johal wrote: ----

Something in my Windows XP keeps trying to extablish a
dialup connection. Anyone has any ideas. In Taskmanager,
if I remove the service rasautou.exe, the problems
disappears for that session, until I reboot

Yeah I got it too it in
windows-system 3
remove it and it comes back after reboo
tiny personal firewall pics it up, zone alarm does not, nor does spybo
will try addawar
properties for this file show it as microsft remote access dialer but i have that turned off in
control pannel-system- remote
anyone got any ideas

 

[David Candy]

Connect and Type netstat -o and this will tell you the PID. Type tasklist for a list of PIDs (or look in Task Manager Processes tab). Also look at nbtstat -s. You may need to type this when the data is being set.

 

[Guest]

Cant find rasautou in task manager but tiny p.firewal
shows this attempted conectio

Count:
Module:Firewal
Actionrevente
Application:Syste
Access:Outbound IP acces
Object:224.0.0.22 (IGMP.MCAST.NET), prot:
Interface:[7] WAN Miniport (IP
Time:15/05/2004 10:24:57 P

 

[Lance Joiner]

Here's some info..
http://www.derkeiler.com/Newsgroups/microsoft.public.security.virus/2003-11/1602.html

| Cant find rasautou in task manager but tiny p.firewall
| shows this attempted conection
|
| Count:1
| Module:Firewall
| Actionrevented
| Application:System
| Access:Outbound IP access
| Object:224.0.0.22 (IGMP.MCAST.NET), prot: 2
| Interface:[7] WAN Miniport (IP)
| Time:15/05/2004 10:24:57 PM
|