Tip: Run a free scan for common Windows errors ad

re: XP continually sends to Internet Wednesday, December 24, 2008 at 5:16 pm Posted by triplate (20834 messages posted) What does Task Man say??..if its an .exe..it should show...run HiJackThis and see whats running... [Reply or follow-up to this message] re: XP continually sends to Internet Wednesday, December 24, 2008 at 6:44 pm Posted by alex (2812 messages posted) Open Run subkey and look for strange and funny looking Name value and Data value.Could be a bunch of letters only with the extension .exe or .dll. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] If you goto %systemroot%/system32folder open it and view by Date Modified,again there could be some strange files added very recently BTW if you visit strange sites you get visited by strange and nasty visitors but it's not the reindeer. On Wednesday, December 24, 2008 at 4:03 pm, Pops wrote: >My PC continually pings (I am not using "ping" literally) the Internet. >This happens about 100 times per minute. >If I watch a Hulu video, I get constant interruptions. >I have no programs running except those in the background. >Avast is my anti-virus program. >Zone Alarm Free is my firewall. >XostSpySE is my main anti-spyware program. >I also run Ad-Aware occasionally for spyware detection. >I've run several on-line programs also, but found nothing. >My pc seems clean. >I can stop this annoyance by using my firewall and locking out the Internet. >Need help on how to look for the program that is doing this. >Thanks. [Reply or follow-up to this message] re: XP continually sends to Internet Wednesday, December 24, 2008 at 8:12 pm Posted by cogs (202 messages posted) what tells you it's 'pinging'? is there anything listed in zonealarm control panel? also, as above, instead of 'date modified', i list it under 'date created'. [Reply or follow-up to this message] re: XP continually sends to Internet Wednesday, December 24, 2008 at 8:42 pm Posted by Mozark (255 messages posted) try this in the Run box type cmd the " netstat -ab" it will show you what connections are occuring [Reply or follow-up to this message] re: XP continually sends to Internet Thursday, December 25, 2008 at 11:13 am Posted by Pops (8 messages posted) I am using the XP constantly today for an off-line project. Hopefully it will be done Saturday. Many thanks Alex, Mozark, & Cogs for you ideas. I will try them all and get back to all of you on Saturday or Sunday. Pops Windoz is a toxic envirnoment. Go Linux. [Reply or follow-up to this message] re: XP continually sends to Internet Saturday, December 27, 2008 at 4:43 pm Posted by Pops (8 messages posted) Triplate, I'm on a different box (Vista) and typing in what I see on the XP box. Hope my old eyes see correctly. Task Man says: Svchost taskmgr alg ctfmon zlclient spoolsv ashDisp aswUpdSv explorer aawservice avchost svchost vsmon svchost svchost svchost svchost lsass services winlogon csrss smss ashWebSv ashMalSv System System Idle Process The last one uses over 90% CPU I should check these files out at www.pacs-portal.co.uk/startup_index.htm -- Cold boot and started HiJack: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 7:26:44 PM, on 12/27/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16762) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\setup\avast.setup C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\System32\svchost.exe C:\Documents and Settings\James Sindberg\Desktop\HiJackThis.exe C:\WINDOWS\system32\wuauclt.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1182473866296 O17 - HKLM\System\CCS\Services\Tcpip\..\{7EDA9BA1-4216-4AE7-B80B-704FB8B67282}: NameServer = 209.55.5.10,209.55.5.11 O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe - Show quoted text - -- End of file - 4071 bytes ----- Zone Alarm shows a blinking program box in the upper right entitled Generic Host Process for Win32 Services What do you think? Thanks in advance. -- Windoz is a toxic envirnoment. -- Go Linux. -- [Reply or follow-up to this message] re: XP continually sends to Internet Saturday, December 27, 2008 at 4:50 pm Posted by Pops (8 messages posted) Sorry about the bad format. Don't know why CRLFs didn't work. I could use some help here. -- Windoz is a toxic envirnoment. -- Go Linux. -- [Reply or follow-up to this message] Tip: Use one of the [Reply or follow-up to this message] links above to add a message to this thread Search this forum Start a new thread on a different subject Report abuse of the forum Return to the Windows XP Discussion Forum