Virus or CIA???

[Steve]

I recently installed SP1 to improve the security of my
machine. During the download/installation of SP1 about
40megs of files were uploaded?
Since them about another 20megs have uploaded.
It is still going on weeks after the SP1 download??
Is this normal???
How can I findout what files have been uploaded?
How do I know that commerically sensitive info have not
been copied??
Is it a virus or MS & CIA???

 

[Matt Coy]

Microsoft does not want your personal files and would not have the time or
resources to look through them.

The CIA only operates outside of the US.

Since you know how many megs have been uploaded, can you tell us what
hostname they were sent to?

--
=============================================
Matt Coy, MCSE
Microsoft Aficionado
Associate Expert
Expert Zone -
=============================================

 

[Guest]

-----Original Message-----
I recently installed SP1 to improve the security of my
machine. During the download/installation of SP1 about
40megs of files were uploaded?
Since them about another 20megs have uploaded.
It is still going on weeks after the SP1 download??
Is this normal???
How can I findout what files have been uploaded?
How do I know that commerically sensitive info have not
been copied??
Is it a virus or MS & CIA???
.
Most likely it's the Taliban!!

 

[Bruce Chambers]

Greetings --

What specific application does your firewall say is doing the
"up-loading?"

Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Roger Abell [MVP]]

As this upload behavior is definitely not normal, it is highly
likely that either something you choose to install, or something
that penetrated your system while it was not at current service
is operative without your knowledge.

You can use msconfig in the PChealth section to see what is
loading on startup, Task manager to see what is running at
a given moment, services.msc to see what loads and starts
as a service, etc..
You can collect information by watching the upload behavior,
but you regrettably will not have much luck after-the-fact in
finding out what has been included in the 60 some megs of
already uploaded stuff you have mentioned.

You should get some good malware scanning done on that
machine to see what it finds, and you may want to start the
process of preparing for a clean install, as a compromised
system can never be cleaned to a 100% certainty level.

 

[David]

I recently installed SP1 to improve the security of my
machine. During the download/installation of SP1 about
40megs of files were uploaded?
Since them about another 20megs have uploaded.
It is still going on weeks after the SP1 download??
Is this normal???
How can I findout what files have been uploaded?
How do I know that commerically sensitive info have not
been copied??
Is it a virus or MS & CIA???

It is likely that you have WinUpdate set to automatically download and
install patches nd the additional megs are merely hotfixes.

--

David

Programmers write "Help Files" for a reason. use them.

"Due to Viewer dicretion...
Graphic violence is advised"

http://www.HeroicStories.com/
http://www.thisistrue.com/

 

[Star Fleet Admiral Q]

David,
Automatic windows update doesn't upload "hotfixes" back to Microsoft -
it is very likely the OP has a virus or trojan trying to propagate itself to
other unprotected computers.

 

[David]

David,
Automatic windows update doesn't upload "hotfixes" back to
Microsoft -
it is very likely the OP has a virus or trojan trying to propagate
itself to other unprotected computers.

Hmm, I read that as a 40 mb SP1 and a 20mb unknown being uploaded to
his computer. Prehaps I misread it.

--

David

Programmers write "Help Files" for a reason. use them.

"Due to Viewer dicretion...
Graphic violence is advised"

http://www.HeroicStories.com/
http://www.thisistrue.com/