Internet connection problem!

[qarlandZ]

I've recently reformatted my computer and installed Windows XP SP1. After installing and downloading various programs like Mirc, Aim, and Divx; I turned off the computer so I could get some rest. After returning and logging back on to my connection (56k btw) I noticed that my connection was constantly in traffic. The two little computers on the bottom right were always blue. I double clicked the icon and it showed that I've sent and received about 9 megs worth of data in the last 10 minutes. Because of this (I assume) I can't go on to websites after about 1 minute of connecting to the internet. It's driving me crazy! But, if I download anything right after I get online, I can still browse as my connection is being used elsewhere (again, im assuming) Please help! I think I'm d/ling spyware. What can I do to fix this mess? TIA

Edit: I've already d/led the latest Windows updates and Hijackthis/Spybot/AdAware to destroy the spyware but my connection is still in traffic when I'm not doing anything.

 

[mechBgon]

Ok, here is your plan:

1) Download free ZoneAlarm from here and save the installer on a CD or a USB drive

2) Reformat and reinstall Windows, then install ZoneAlarm before connecting to the Internet

3) DO NOT install that junk you installed before

4) Get an antivirus program

5) Install the antivirus program and configure it. Max out all modes of detection (heuristics, compressed files, etc). If you need one to start with, you can get a free 15-day trial of Norton 2005 from here to get started with, it's about a 24MB download. Again, it is important to configure the software... max out the heuristics, enable compressed-file scanning.

6) Get Automatic Updates enabled and let it get started on downloading Service Pack 2, or go out to Frys or Best Buy or Dabs and get a free SP2 CD.

7) Make sure that your user accounts have strong passwords and use a Limited account as your daily-driver account. Yes, I'm serious. If you're going to run mIRC and AIM and such, then definitely fasten your seatbelt by using a Limited account.

 

[mechBgon]

Also, if you want, post the logfile text from your HJT 1.99 scan.

 

[w00t]

Originally posted by: mechBgon
Ok, here is your plan:

1) Download free ZoneAlarm from here and save the installer on a CD or a USB drive

2) Reformat and reinstall Windows, then install ZoneAlarm before connecting to the Internet

3) DO NOT install that junk you installed before

4) Get an antivirus program

5) Install the antivirus program and configure it. Max out all modes of detection (heuristics, compressed files, etc). If you need one to start with, you can get a free 15-day trial of Norton 2005 from here to get started with, it's about a 24MB download. Again, it is important to configure the software... max out the heuristics, enable compressed-file scanning.

6) Get Automatic Updates enabled and let it get started on downloading Service Pack 2, or go out to Frys or Best Buy or Dabs and get a free SP2 CD.

7) Make sure that your user accounts have strong passwords and use a Limited account as your daily-driver account. Yes, I'm serious. If you're going to run mIRC and AIM and such, then definitely fasten your seatbelt by using a Limited account.

yep, i ussaly just download norton 30 day trial and updates but them on a disk and reformat. when i do this i dont have the connection active meaning i unplug my modem, or ethernet or press sleep botton. than when i finish reformating i install norton 30 day trial and updates when that is done

i plug into internet install windows updates except sp2 since my comp is bad it makes it even worse. after u install windows updates. o ya i put all my drivers on cd too so i dont have to go to websites and check it out you should to its overall alot faster.

have fun

 

[qarlandZ]

Thanks a lot for the input. I d/led Zone Alarm and my download speed was back to normal! I discovered that in about a 10 minute time span, there were close to 250 Intrusions! How can I get rid of this? Or do I need ZoneAlarm on everytime I log on? Also, I'll try getting SP2 get Fry's. Where would I ask though? I don't really want to format, but if it will fix anything then... maybe Thanks again!

 

[mechBgon]

Or do I need ZoneAlarm on everytime I log on?

You need firewall protection 100% of the time, yes. Stick with my plan, which is to reinstall Windows and get all your defenses in place from the start:

1) Service Pack 2

2) Fully-configured antivirus protection

3) Software firewall (this can be the one that Service Pack 2 gives you, or free ZoneAlarm, but it should always be activated. Period.)

4) Follow the other suggestions here, including the Ongoing Prevention ones, and do not install stuff you don't know where it really comes from.

 

[montag451]

VERY important,

Make sure only one firewall is running - choose whichever one you want, but by default, sp2 has its firewall enabled - make sure in this case that you uninstall any other

 

[qarlandZ]

Thanks for all the help. But what I still don't know is why my Received bytes is so freaking high even though I don't see myself d/ling anything. Right now it's 9 megs while my sent bytes is only 1 meg. So, there's no way to stop this? Before formatting, I've never had any spyware conflicts of this kind.

 

[mechBgon]

There could be an innocent explaination, like Windows downloading updates for itself, or your antivirus doing likewise, but since you have nearly no time into this installation, I would just drop the bomb on it and start over KNOWING that you have your defenses up from the beginning. I'm crazy like that...

 

[RedDog75]

Might be a good idea to check that your firewall is actually protecting all ports on your system. If you have a trojan, you are more than likely going to be wide open. If you've reformatted your HDD, like mechBgon suggested, that should hopefully take care of that (unless you have another drive or something that it resides on).

Check out this website that I use all the time to check my connection is secure. I never mess around w/o a firewall - there are crazies on the internet out there!

 

[mechBgon]

It would be interesting to see the HijackThis! log output

 

[Gentle]

Just remember this.

If ZoneAlarm puts up a window saying something is asking for permission to access the internet (or something similar to that) and you don't know what the program is, just open your browser and search for the name of the program so that you can see what it is for.

If you don't know what it is for, tell it to deny access (do not choose the "do not ask again" yet).

If you still have full functionality of your computer after using it for a while, you are o.k. in most cases to tell it to deny access to that program forever.

Then, you go research more on how to remove it, as it may be spyware/adware/malware.

A scanner (spyware/adware/malware) would be wise as mentioned previously.

Gentle

P.S. In all honesty, if ZoneAlarm is doing it's job, most "intrusions" detected aren't anything to freak out over.

 

[montag451]

AHHH

Have you got autoupdate feature in windows enabled - if you have, then your computer is gonna constantly be downloading updates from microsoft -

 

[qarlandZ]

I can't browse anymore! I d/led Spybot 1.3 and immunized my cpu as well as scanned it, but after the scan and a restart, I can't seem to browse anymore. I can't even get on AIM. Oh well, I guess I'll format since I'll be getting DSL again, YES!

On the Windows Update, I turned it off so I don't think it's that.

 

[mechBgon]

Originally posted by: qarlandZ
I can't browse anymore! I d/led Spybot 1.3 and immunized my cpu as well as scanned it, but after the scan and a restart, I can't seem to browse anymore. I can't even get on AIM. Oh well, I guess I'll format since I'll be getting DSL again, YES!

On the Windows Update, I turned it off so I don't think it's that.

Good luck and remember: do NOT plug in your network cable until you have firewall software installed, configured and running.

 

[qarlandZ]

Thanks again!