Unknown autodialer?

Discussion in 'Software' started by evilevets, Feb 8, 2005.

  1. evilevets

    evilevets Sergeant Major

    This is strange. All of a sudden, my dial-up (yes, I still have dial-up...stop laughing!) program will open and automatically begin dialing. It only dials four digits, so it never does connect. It does this about every three minutes.

    I use SpywareBlaster and Zone Alarm, all with newest updates. I also run SpyBot S&D, Adaware SE, AVG and Avast regularly. I have no viruses or spyware whatsoever.

    Zone Alarm normally will prompt me if something is trying to access the net. This however slips by ZA somehow.

    When the modem begins to dial all by itself, I check Task Manager to see any new processes that I don't recognize. Here is what I found:

    RASAutoU.exe - it's a legitamate MS process. Here is what Answersthatwork says about it: "
    Windows NT4/2000/XP/2003 Remote Access Dialler. This task will appear in your Task List if your PC or Server is currently handling or waiting to handle an incoming modem based connection from a remote user or system (dial-up modem, ISDN, USB ADSL modems). It will also appear if there is software on your system which needs to dial out automatically whenever a particular event occurs and without waiting for user input.
    Recommendation :
    Leave alone unless you know for certain that your PC/Server has no business waiting for an incoming remote connection, or that it should not have software which dials out automatically. If you find that your PC is connecting automatically via RASAUTOU without reason, then run Spybot from our Downloads library in case you may have adware or spyware which is trying to connect to remote servers."

    I've done nothing different lately. Well, I upgraded the RAM and added another optical drive. I also installed a D-Link wireless router, but I did that like a week ago, and this just started happening last night.

    I can't for the life of me figure out exactly which program or service is trying to access the net.


    Any ideas?


    Thanks,

    Steve
     
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    when ZA alerts you to outgoing... does the popup give you a program/file name?

    Some thrid party apps can use that MS file... any new software installed, even if it was a week ago "maybe" thats when that software is set to check for an update?
     
  3. evilevets

    evilevets Sergeant Major

    Thanks Halo.

    Like I said though, this one somehow slips by ZA. It starts dialing, and ZA doesn't pop up or do anything.


    Steve
     
  4. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Open Regedit and find your way to here HKEY_CURRENT_USER\Software\Microsoft\RAS Autodial\Addresses may give some clues as to whats dialing up.

    Maybe run HJT and see if there is anything you dont recognise also do you have ZA set to Medium Program control.. thus allowing the app to make judgement on wether access is allowed or not, if so check the programs list for anything you dont recognise.


    plus a lovely long thread on similar http://www.annoyances.org/exec/forum/winxp/r1067534464
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds