Spyware Attack?

[Kickstart]

Hi

Any more ideas.

My net connection is running dog slow (even more so that usual), but it is quite happily sending and receiving loads of data when I am doing nothing online. I have installed 3 of the blockers mentioned in the thead on submissions (Ad-Aware, SpywareBlaster and SpyBot), which found a few things which have been removed now. Norton is also running (anti virus and internet security).

To further make life a pain my machine keeps auto dialing to the internet (using my normal default connection, not some premium rate number), which means I have to turn the modem off or the machine off when I am not using the web (and if I just turn the modem off it keeps coming up with an error message saying it cannot find the modem ).

All the best

Keith
____________________
Traxpics, track day and racing photographs - Bimota Forum - Bike performance / thrust graphs for choosing gearing

[monkeyman]

Um for some reason every time i reinstall windows i get the blaster worm. Which either turns the computer off a lot or hogs bandwidth.

I was getting 5kb/s when my connection is usually able 2 download at about 60kb/s

But if your virus scanner doesn't pick it up then its unlikely 2 be that, Update it and see if it finds it.

Your dial up connection is likely to be something to do with your settings, you may have a box in your internet options ticked that tells your computer to dial a connection whenever a connection isn't present.

Also try using windows update it may patch any security holes that a virus you may have is exploiting.
____________________
Im not the best, but im in the top one
RM 250, Husky TE610, K1 GSXR 750

[Milo]

Get a firewall on there - that way only allowed applications can use the bandwidth.
As for the blaster worm - re-installing will do nothing for you if you plan on connecting to the net again - just get the patch.
I use Sygate Personal Firewall and I've converted everyone I know to it - much better than Zone Labs' freebie.

Adam
____________________
Shaft drives rule.

[craigT19]

im also finding that my pc is getting slower and slower

yet pop ups have no problems loading up
____________________
Bikes owned :- 2001 nsr125, 1999 zx6r, 2006 yzf-r1, 2009 xmax 250, 2012 yzf-r1, 2015 MT-07
Current bike : - 2016 MT-10
BCF member pops. sadly missed 1945-2003

[Kickstart]

Hi

I have Norton Internet Security running that has a firewall built in. I have just done an update and virus scanned the machine and the net connection is still dog slow (and I can see it happily sending and receiving data as I type this). I do not have it set up to dial when there is not a connection.

All the best

Keith
____________________
Traxpics, track day and racing photographs - Bimota Forum - Bike performance / thrust graphs for choosing gearing

[Stevie Northants]

Have you used disc clean up and defragged it?
____________________
Stevie
'98 Gixer 600,red and black(the fastest colour )
Why put off until tomorrow what you can get someone else to do for you today?

[mr jamez]

Smoothwall server, AVG, spybot, firefox and Moziilla thunderbird mail spyware and virus free. I would suggest o&o defrag, alot better than the windows defragger in my opinion. Make sure Spybot is updated as well, don't find norton anti virus much use really

[xlfive]

Hi mate i had this problem before i got broadband, the technical support people at AOL told me to check the following.
Go start/control panel/internet settings/connections, there you will see what is dialing out, it should only have your ISP in the box if your on broadband the box will be empty hope this helps.

[Craig_]

Keith,

I remember my borther once went on some music sites and they basically used the conntection as their server, until I flicked the switch on the modem, but this is cable not dial up. Do you have a firewall installed, as those do wonders when they work.

Also, as xlfive mentioned, check to see if its only your IP using the connection, and no other ones.
____________________
VAG Cars - www.vagcars.co.uk - North East VAG Owners Club

[Milo]

You need to use a firewall that identify's each application's use of the connection. Does Norton let you do that?

On mine if an application tries to use it it will ask me if I want to let it, does yours?

I'm sure you've already tried AdAware, but did you use the updater tool within it first?

Adam
____________________
Shaft drives rule.

[mr jamez]

Meh

www.smoothwall.org

[Craig_]

Milo, you using a Macafee firewall? I am and it does just that, you can also look at whats tried to get into your computer which fills the time when your bored.
____________________
VAG Cars - www.vagcars.co.uk - North East VAG Owners Club

[Milo]

I use Sygate Personal Firewall - it's free and the best non-hardware firewall I've used.Never heard of Smoothwall but open source is always good!
____________________
Shaft drives rule.

[Kickstart]

Hi

Just downloading the latest Ad-Aware pack.

Norton does tell you what is trying to access the internet. Trouble is that 99% of things seem to access it via svchost.exe, so it is fairly useless.

All the best

Keith
____________________
Traxpics, track day and racing photographs - Bimota Forum - Bike performance / thrust graphs for choosing gearing

[headlamp]

Mmmm, Sounds like adware or spyware and a dialler. I think the best anti-trojan, spyware killer is Pest Patrol. Available at https://www.pestpatrol.com/ . I have Adaware 6.0, Spybot, and Anti Trojan, www.anti-trojan.net. Pest Patrol has sorted all the pop-ups, unlike the others and found a dialler that had lurked on my system for ages!

Also for faster Internet browsing go to in Internet Explorer, assuming this is your browser, Tools, Internet Options, then Delete Files.

H
____________________
Using a mobile phone while driving a car should be made a capital offence!

[Craig_]

Cheers for that one headlamp, knew about everyone apart from that pest patrol, and it seems to find others spybot doesn't find.
____________________
VAG Cars - www.vagcars.co.uk - North East VAG Owners Club

[Kickstart]

Hi

The machine is fairly new, so not that much installed. I will try a defrag (although that will probably freak when whatever scumware it is causes the machine to try and dial).

Spybot has not found anything.

The connection that is being dialed is the normal connection. It is not a different number or anything. It is set up to "Never dial a connection".

However, thumping a few more things seems to have stopped it for now.

All the best

Keith
____________________
Traxpics, track day and racing photographs - Bimota Forum - Bike performance / thrust graphs for choosing gearing

[True Blue]

Try running spybot and adware in safe mode. this solved my spyware problems.
____________________
Past >>>> Honda NSR 125 >>>> Suzuki GSXR 600 K1 >>>> Suzuki GSXR 600 K4 >>>>Kawasaki Z1000 DAF >>>>Suzuki RMZ 250 >>>> Current >>>> KTM Superduke R 1290 >>>>

[GFK]

It really does pay to know what the stuff in your tasklist actually does. You can find out here. If stuff is running on your system that isn't on that list, search on www.spywareinfo.com or ask at their forums.

It also pays to regularly check the startup tab in msconfig. If anything new appears, investigate it.

[Kickstart]

Hi

PestPatrol is currently running. See how that goes. It has already found one thing that has got past the others (CWS.GoogleMS.3).

By the way, I am using Opera rather than IE.

All the best

Keith
____________________
Traxpics, track day and racing photographs - Bimota Forum - Bike performance / thrust graphs for choosing gearing

[GFK]

[dainesefreak]

As Headlamp mentioned Pest Patrol is good, I had been running Ad-aware and regularly updating. I noticed that I had a problem with a service that Ad-aware wasn't removing so I tried Pest Patrol, it found 51 items that Ad-aware had not seen.

CWShredder is also worth a download.

As far as Norton Anti-virus goes, we use it as our corporate Anti-virus application. It's absolutely shite, we have had machines that are running the latest virus patterns and MS patches and it's still not able to remove viruses that are years old. We end up running a quick fix scan from McAfee called Stinger over the top of Norton and considering it's a limited freebie, it performs a hell of a lot better than Symantec Corporate version 8.

[Milo]

We use Computer Associates InoculateIT at work and it's been great so far.
Used to use Norton at home until for some reason it wiped my old computers BIOS.

How's it going Keith?

Adam
____________________
Shaft drives rule.

[Kickstart]

Hi

The pest that Pest Patrol found was not found by CWShredder!

Currently the machine is trying to load the M$ updates.

Sometimes I hate PCs.

All the best

Keith
____________________
Traxpics, track day and racing photographs - Bimota Forum - Bike performance / thrust graphs for choosing gearing

[headlamp]

Hi Kickstart,

Glad that Pest Patrol worked for you!

Head
____________________
Using a mobile phone while driving a car should be made a capital offence!