Unwanted Internet Connection

[Lex]

I access the Internet through dial-up, and when I'm not
connected to the 'net evry 15 mins or so a the internet
connection box will pop up just as if I'd chosen to
connect. I've run anti-adware software, and checked for
viruses with nothing coming up. I can't think of anything
else to do. Any help would be greatly appreciated

 

[Chuck]

I access the Internet through dial-up, and when I'm not
connected to the 'net evry 15 mins or so a the internet
connection box will pop up just as if I'd chosen to
connect. I've run anti-adware software, and checked for
viruses with nothing coming up. I can't think of anything
else to do. Any help would be greatly appreciated

Lex,

"Every 15 minutes or so" sounds like a mail client (Outlook or something) set to
check for incoming email. Does that ring a bell?

What Adware did you run? Did you run HijackThis? If so, post a link to where
you posted the log - maybe something got overlooked.

If not, run it. HijackThis looks for spyware in ways that are unique.

First, download LSP-Fix from <http://www.cexx.org/lspfix.htm>, and CWShredder
from <http://www.majorgeeks.com/download4086.html>. Both free.

Next, run CWShredder. Have it fix all variants.

Now check for, and remove, spyware. Get HijackThis
<http://www.majorgeeks.com/download.php?det=3155> and Spybot S&D
<http://security.kolla.de/index.php?lang=en&page=download>. Both free.
1) Install and run Spybot. First update it ("Search for updates"), then run a
scan ("Check for problems"). Trust Spybot, and make all recommended deletions.
2) Install and run HijackThis. Do NOT make any changes immediately. Save the
HJT Log.
3) Have your HJT log interpreted by experts at one or more of the following
forums (and post it here):
<http://forums.net-integration.net/>
<http://www.spywareinfo.com/forums/>
<http://forums.tomcoyote.org/>
<http://www.wilderssecurity.com/>

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Guest]

Okay I've done everyting you said, purged my system of
any spyware at least (thanks for the tip, Spybot kicks
AdAware into a cocked hat)

Here's the HijackThis log file, though i feel guilty
posting it entirely here.. Follow this link to find it

http://www.geocities.com/theverydarkhorse/hijackthis.log

Thanks for the help so far

 

[Chuck]

Okay I've done everyting you said, purged my system of
any spyware at least (thanks for the tip, Spybot kicks
AdAware into a cocked hat)

Here's the HijackThis log file, though i feel guilty
posting it entirely here.. Follow this link to find it

http://www.geocities.com/theverydarkhorse/hijackthis.log

Thanks for the help so far

Lex,

That's a pretty clean log. I'm wondering what SSD found, and if it made any
difference.

TkBellExe is a known CPU waster, probably not your auto reconnect, but most
folks would advise you to kill it - you don't need it. Start - Run - "msconfig"
- Startup - uncheck it. Then reboot.

There's no blatant adware or spyware though. Looks like AA / SSD caught it all.

If there's no spyware causing the automatic connection, you might want to check
legit stuff. See if anything is set for an automatic reconnect.

You might want to check the SETI client first. What happens if your internet
connection is off - is it possible that SETI kicks in and connects? When you
offer your computer to the cause of global computing, who knows what happens?

Are you using the Microsoft Fax service? I see quite a few fax / modem related
processes.

Some versions of Zone Alarm, IIRC, check for updates.

If no more clues, get Port Explorer (free) from
<http://www.diamondcs.com.au/portexplorer/index.php?page=home>. PE will show
you what network connections your computer is actually opening, and what
processes are opening them. So start PE, let your mysterious process dialup
just once more, and see what process is "phoning home". Then, get Process
Explorer (free) from <http://www.sysinternals.com/ntw2k/freeware/procexp.shtml>.
Provides way more information than Task Manager. You can look at any process
and see what modules it contains, and who wrote or distributed each module.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.