Remote Access Service making unattended dialup ISP connections

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by dhh992, Sep 21, 2004.

  1. dhh992

    dhh992 Private E-2

    I have two networked computers. One keeps making a dialup connection to ISP via the other, all on its own! I can't tell if this is normal or not, as a result of enabling "Internet Connection Sharing" on one PC.


    Two PC's running W2K, fully updated. Dial-up ISP. Have used it for years with both PC's with no issues.

    Recently networked the two (TCP/IP over Ethernet) so both could use the dial-up ISP simultaneously by enabling “Internet Connection Sharing” on one PC. That works fine also. Call the two PC’s “server” and “client”. The “server” is the one where Internet Connection Sharing has been enabled and the “client” is the one that now shares that connection when it needs to.

    Problem: The client PC keeps automatically requesting dialup service of the server. The server connects, as it is supposed to when requested. When the connection is being made the task “Remote Access Service” (rasautou.exe) is the task/process that is making the connection. If I disconnect, it soon reconnects automatically again. Note that both PC’s sit idle, as they should, if I disable the Internet Connection Sharing. Note also that rasautou.exe apparently is the usual method of making the connection

    What I’ve done so far, with no success: I’ve removed (renamed) “rasautou.exe” numerous times (on server) but a new copy simply appears. I’ve disabled Remote Access Auto Connection Manager service on the server. I have to leave Remote Access Connection Manager activated on the server in order to share the internet connection I have to leave both Remote Access Connection services active on the client in order to make the dial-up from the client.. The client PC still causes the server PC to dail-up to the ISP. When I disconnect at the server the client will again reconnect automatically soon afterwards (within seconds at times, other times within minutes, other times only after a lengthy delay). I’ve run the latest copies (as of 9/21) of “SpyBot Search and Destroy” (personal edition) and Lavasoft’s “Ad-Aware Personal”. Nothing good came of it. I’ve run latest updates of Norton AV. Again, nothing good came of it.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds