Potential Attack...

  • Thread starter Thread starter Pascal Tomasi
  • Start date Start date
P

Pascal Tomasi

Hi There,

I have a win2000 machine, with Norton Antivirus +
Firewall. I have recently signed up for a broadband
connection and when I am dialed up, my computer seems to
be constantly sending information on the net even though I
have shut down all applications. I have checked on the
Task Manager and no application appears, but the processes
which are actually active are:
drst.exe and services.exe.

Is there anyway of finding out which application is doing
that and does anyone know what I should do to stop that?

Many thanks,

Pascal.
 
Hi There,

I have a win2000 machine, with Norton Antivirus +
Firewall. I have recently signed up for a broadband
connection and when I am dialed up, my computer seems to
be constantly sending information on the net even though I
have shut down all applications. I have checked on the
Task Manager and no application appears, but the processes
which are actually active are:
drst.exe and services.exe.

Is there anyway of finding out which application is doing
that and does anyone know what I should do to stop that?

Many thanks,

Pascal.
Click to expand...

www.sysinternals.com

From this site you can download some useful utilities - free.

TCPView - lists the internet processes in progress, allowing you to
identify the source of the process on your pc.

Autoruns - allows you to easily see the programs set to run on startup
in your pc - and remove them if required (from your desktop)

Process Explorer - allows you to see (and kill) any process running in
memory on your pc.

Naturally you have to know what you're doing with these tools.
 
As mentioned use TCPView to map process to port and folder and be sure to run a virus
scan and spyware scan with something like AdAware while your computer is offline and
do not connect it back to the internet until you are using a firewall, either a NAT
device at the router [which I use] or at least a software firewall such as Zone Alarm
which is free and adequate for average users. Since your computer is not part of an
AD domain I would go to tcp/ip properties/advanced/dns and uncheck register this
connection and also disable file and print sharing on your computer if you are not on
a network offering shares. See the link below on protecting your computer. -- Steve

http://www.microsoft.com/security/protect/
http://mvps.org/winhelp2002/unwanted.htm#
 
-----Original Message-----
Hi There,

I have a win2000 machine, with Norton Antivirus +
Firewall. I have recently signed up for a broadband
connection and when I am dialed up, my computer seems to
be constantly sending information on the net even though I
have shut down all applications. I have checked on the
Task Manager and no application appears, but the processes
which are actually active are:
drst.exe and services.exe.

Is there anyway of finding out which application is doing
that and does anyone know what I should do to stop that?

Many thanks,

Pascal.
.
Pascal: I would first contact you internet highspeed
Click to expand...
provider. Secondly you can ask the question of Symentec @
their web page, Symantec.com for free by going to their
suport page. Hope this helps. Paul
 
Back
Top