Every now and then when I'm on line, i see my modem activity lights
flashing furiously. Someone/something is getting into my computer.
Right now, 5 megabytes have been downloaded to my box. Is there any
way I can detect who is getting into my computer? I suspect it's
Microsoft, but I'd like to be able to know for sure. Thanks for any
help w this.
Bill Murn

bill murn wrote:
> Every now and then when I'm on line, i see my modem activity lights
> flashing furiously. Someone/something is getting into my computer.
> Right now, 5 megabytes have been downloaded to my box. Is there any
> way I can detect who is getting into my computer? I suspect it's
> Microsoft, but I'd like to be able to know for sure. Thanks for any
> help w this.
> Bill Murn

bill murn wrote:

> Every now and then when I'm on line, i see my modem activity lights
> flashing furiously. Someone/something is getting into my computer.
> Right now, 5 megabytes have been downloaded to my box. Is there any
> way I can detect who is getting into my computer? I suspect it's
> Microsoft, but I'd like to be able to know for sure. Thanks for any
> help w this.
> Bill Murn
do you have a firewall ?
look the out-going traffic
check de logs
install some network monitoring software

--
Even though I walk through the valley of the shadow of death,
I will fear no evil, for you are with me;
your rod and your staff, they comfort me.

If you have Windows automatic updates running on your PC, it will
automatically download updates when there is little activity on the
modem...that could be the source. But, truthfully, it could be just
abouut any software/malware on your computer. The best way to locate
where this traffic is going to & coming from, is to run a network
sniffer such as Ethereal. It will show you the IP addresses of packets
going in and out your network interface. If you want to find out who
owns a given IP address, just run a whois query on the IP address. I
like using the ARIN website...
http://www.arin.net/whois/.
However, if the IP address is international, you will have to use a
different registrar for the whois query.

You said that 5mb have been downloaded. How do you know this? and what
files were downloaded?

Hope this helps,
Geoff Wilson

Hi Bill,

Use Nsauditor and you will forget about your problems.
Nsauditor monitors network connections and processes (applications and
services) currently running on the computer. This tool shows you
detailed listings of all TCP and UDP endpoints of your system including
owner process name, remote address and state of TCP connections, also
you can closes the connections.

http://www.nsauditor.com

download "spybot-search and destroy" and "add remove pro" These two
will do the job for you

best of surfing
Jack ryan

On 6 Dec 2004 17:53:39 -0800, billmurn [at] hotmail.com (bill murn) wrote:

>Every now and then when I'm on line, i see my modem activity lights
>flashing furiously. Someone/something is getting into my computer.
>Right now, 5 megabytes have been downloaded to my box. Is there any
>way I can detect who is getting into my computer? I suspect it's
>Microsoft, but I'd like to be able to know for sure. Thanks for any
>help w this.
>Bill Murn


Got automatic updates turned on? If yes, then it might really be
coming from Microsoft.

Ethereal makes a free tool that will show you all the packets going to
and from your computer. Evaluating all the traffic can be time
consuming because it catches everything.

You can get this at www.ethereal.com. There is another tool that they
recommend you d/l and install first. The information is all on the
site.