Click to See Complete Forum and Search --> : System Hijack Virus?, Please help


J Krishnan
September 6th, 2003, 01:13 AM
Hi Gurus:

When ever I connect to Internet (dialup) some process is sending (uploading) significant amout of data. (right now it has sent 22 Mega Bytes of data in 37 minutes).

I tried my best to find any viruses. I also tried to stop all the running process (all the ones I could stop) without any solution to this problem.

My process list is attached with this post.

Another thing, I noticed this problem, after the latest security update from microsoft (after the blaster worm). With this update I also updated Internet Explorer to Ver 6.0.28.

I am running windows 2000 with up to date Microsoft updates. My Norton Antivirus software is old (2001) and I think I need to buy/subsribe for newer updates.

Any help to find this application which constantly sends (uploads) data is highly appreciated.

Also, I tried spybot, SpywareGuard, HijackThis etc without success in finding the problem.

Please see the attached process list.

Thanks a lot.

JK

Mick
September 8th, 2003, 03:50 AM
head yourself over to

www.sysinternals.com

and download some of the utilites, like filemon and process viewer, and I think they have tdimon/tpcview there also, it would be nice if you had some sniffer software like microsofts netmon so you could do a capture and look at the raw data.

Find out what/where files are being written using filemon, start there.