Internet constantly transferring

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

cc2001

Thread Starter
Joined
May 20, 2005
Messages
70
Hello

When I connect my pc to the internet. It constantly transfers. In other words when a page has finished loading it still transfers(two computers in corner both solid lit) I can right click the two small computers for the status and they are constantly sending and receiving. Kind of like a file is downloading. But there is nothing downloading to my knowledge. I have windows 2000 professional. Logfile below.

Logfile of HijackThis v1.99.1
Scan saved at 9:42:38 PM, on 7/18/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\netddeclnt.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\Winsysfirewal32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Sabrina\Desktop\HijackThis.exe

O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [[Win Xp] Personal Firewall] Winsysfirewal32.exe
O4 - HKLM\..\RunServices: [[Win Xp] Personal Firewall] Winsysfirewal32.exe
O4 - HKCU\..\Run: [[Win Xp] Personal Firewall] Winsysfirewal32.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{9AB56DFF-764B-418F-8510-653446983368}: NameServer = 205.171.3.65 205.171.2.65
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: avsuite (mssuite) - Unknown owner - C:\WINNT\msuite.exe
O23 - Service: Network DDE Client (NetDDEclnt) - Unknown owner - C:\WINNT\system32\netddeclnt.exe

Your help is greatly appreciated.

thanks
 
Joined
Sep 7, 2004
Messages
49,014
You have no active AV and no tools

SpywareBlaster 3.4 http://majorgeeks.com/download2859.html
SpyBot V1.4 http://www.majorgeeks.com/download2471.html
AdAware SE 1.06 http://www.majorgeeks.com/download506.html
MS AntiSpy - http://www.microsoft.com/downloads/...A8BD-DBF62EDA9671&displaylang=en&Hash=RDXMHB6 (XP and W2K only)

DL them (they are free), install them, check each for their
definition updates
and then run AdAware and Spybot, fixing anything
they say.

In SpywareBlaster - Always enable all protection after updates
In SpyBot - After an update run immunize


Fix these with HJT

O4 - HKLM\..\Run: [[Win Xp] Personal Firewall] Winsysfirewal32.exe
O4 - HKLM\..\RunServices: [[Win Xp] Personal Firewall] Winsysfirewal32.exe
O4 - HKCU\..\Run: [[Win Xp] Personal Firewall] Winsysfirewal32.exe


Run ActiveScan online virus scan

http://www.pandasoftware.com/activescan/

When the scan is finished, anything that it cannot clean have it delete it. Make a note of the file location of anything that cannot be deleted so you can delete it yourself.
- Save the results from the scan!

Then get the free AVG 7 install it, check for updates and run a full scan

AVG 7 - http://free.grisoft.com/freeweb.php/doc/2/



Download the trial version of Ewido Security Suite http://www.ewido.net/en/download/
· Install ewido.
· During the installation, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu".
· Launch ewido
· It will prompt you to update click the OK button and it will go to the main screen
· On the left side of the main screen click update
· Click on Start and let it update.
· DO NOT run a scan yet. You will do that later in safe mode.

Restart your computer into safe mode now. Perform the following steps in safe mode:


Run Ewido:
· Click on scanner
· Click Complete System Scan and the scan will begin.
· During the scan it will prompt you to clean files, click OK
· When the scan is finished, look at the bottom of the screen and click the Save report button.
· Save the report to your desktop
This will take some time to run!
Post that log and a new HiJack log
 

cc2001

Thread Starter
Joined
May 20, 2005
Messages
70
Did the things mentioned, still constantly transferring


Logfile of HijackThis v1.99.1
Scan saved at 10:36:23 PM, on 7/19/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Sabrina\Desktop\HijackThis.exe

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9AB56DFF-764B-418F-8510-653446983368}: NameServer = 205.171.3.65 205.171.2.65
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: avsuite (mssuite) - Unknown owner - C:\WINNT\msuite.exe
O23 - Service: Network DDE Client (NetDDEclnt) - Unknown owner - C:\WINNT\system32\netddeclnt.exe (file missing)

Here is the report from ewido
ewido security suite - Process report
---------------------------------------------------------

+ Created on: 10:35:48 PM, 7/19/2005
+ Report-Checksum: 15312B64

0: System Process
8: System Process
140: \SystemRoot\System32\smss.exe
160: \??\C:\WINNT\system32\winlogon.exe
164: \??\C:\WINNT\system32\csrss.exe
212: C:\WINNT\system32\services.exe
224: C:\WINNT\system32\lsass.exe
404: C:\WINNT\system32\svchost.exe
432: C:\WINNT\system32\spoolsv.exe
460: C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
484: C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
508: C:\WINNT\system32\svchost.exe
548: C:\Program Files\ewido\security suite\ewidoctrl.exe
644: C:\WINNT\system32\MSTask.exe
708: C:\WINNT\System32\WBEM\WinMgmt.exe
744: C:\WINNT\system32\svchost.exe
804: C:\WINNT\Explorer.EXE
892: C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
900: C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
948: C:\Program Files\ewido\security suite\SecuritySuite.exe
1120: C:\Program Files\Internet Explorer\iexplore.exe
Awaiting your reply

thanks
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Staff online

Top