What is causing my system to automatically dial my ISP at 3:00 AM every morning?

[John J. Duggan]

I have reset my system from automatic windows updates to off. I have the
latest updates to Ad-Aware, Spybot - Search and Deatroy, and Norton
AntiVirus 2003 Peofessional Edition. I ran them all last night and
everything indicated "No Problems". Yet when I sat down to the computer this
morning I saw the modem icon in the Taskbar indicating I was connected to my
ISP. When comparing the then current time, to the time elasped since the
connection was made, the calculation indicated that the connection was made
at exactly 3:00 AM.

This happens everytime I leave my system running overnight. Last night was
the most recent incident.

Can someone please explain how I can prevent this. I get the errie feeling
that a hacker is trying to make an intrusion.

Thanks in advance,

John J. Duggan

 

[R. McCarty]

Are you using the Windows Firewall ? You might be better served
using a 3rd-Party firewall (Zone Alarm,Sygate [Free]). Both will
provide outgoing alerts that will prompt for granting access. You'll
have to teach the Firewall what applications & services to allow
Internet access. Likely, you've got some Auto-Updater that is
scheduled/queued up to run at that time. I would check Scheduler
and see what is loaded up. Also, many apps (Java, Reader) will
do frequent checks for updates. It could also be your WinUpdates
are set to check daily, which isn't really necessary. You probably
should use MSConfig to see what Startups & Watchdogs run when
the system is booted. Symantec LiveUpdate also could be the app
doing the auto-dial. Finally, I would set your Dial-up connectoid to
disconnect after a period of inactivity. (25-30 Minutes ?).

 

[Jim Macklin]

My guess is that Norton is calling for updates, but it could
be a Trojan, it is just more likely that it is scheduled
update from some program you are running. Many programs,
other than Windows do updates.
Check the event log and look at scheduled tasks (Control
Panel).


--
The people think the Constitution protects their rights;
But government sees it as an obstacle to be overcome.
some support
http://www.usdoj.gov/olc/secondamendment2.htm



|I have reset my system from automatic windows updates to
off. I have the
| latest updates to Ad-Aware, Spybot - Search and Deatroy,
and Norton
| AntiVirus 2003 Peofessional Edition. I ran them all last
night and
| everything indicated "No Problems". Yet when I sat down to
the computer this
| morning I saw the modem icon in the Taskbar indicating I
was connected to my
| ISP. When comparing the then current time, to the time
elasped since the
| connection was made, the calculation indicated that the
connection was made
| at exactly 3:00 AM.
|
| This happens everytime I leave my system running
overnight. Last night was
| the most recent incident.
|
| Can someone please explain how I can prevent this. I get
the errie feeling
| that a hacker is trying to make an intrusion.
|
| Thanks in advance,
|
| John J. Duggan
|
|

 

[Winux P]

Do you sleep walk?

-Winux P

 

[Guest]

Hi John,

If you go into Control Panel > Internet Options > Connections Tab > and
select never dial a connection. Then when you want to log on you can log on
via a manual connection that way the computer has no way of dialing to the
internet and clogging your phone line up all night long. Also if you don't
know how to do a manual connection tell us what operating system you are
using and we can tell you how to make a shortcut to your desktop. If you are
still thinking that it is spyware or viruses I would go to...
http://housecall.trendmicro.com/ and do all three of the scans listed there.
Trend micro is so much better than norton that it is not even funny. Norton
is behind 2 months in their definitions and its just getting ugly. So when
your contract runs out with norton I would suggest switching to Trend Micro's
PC-Cillin Internet Security package, it has minimal spyware, Spam, and Virus
Protection, and a good firewall. So check into it.

Joe
Kemco

 

[John J. Duggan]

Many thanks to all who offered advice. It has taken up until just a few
minutes ago to check out all of the suggestions. The information furnished
by Kemco was very illuminating. I believe the problem is now resolved, but I
won't be sure until 3:00 AM tomorrow. In the connections dialog box I
checked to "never dial a connection", and setup a manual logon instead. Hope
this works. I'll let the group know in the morning.

Thanks again.

John J. Duggan