Text 65921, 75 rader
Skriven 2011-07-05 10:47:48 av LEE GREEN (1:102/401)
     Kommentar till en text av Ed Vance
Ärende: What Do You Think?
==========================
Check McAfee's INbound and OUTbound logs.
Could be McAfee doing a major software upgrade to their free ISP
versions which would be large, I know mine was upgraded recently.

Is your WiFi secure? Someone downloading using your connection?

Check your temp dir's for anything mysterious.

When it's happening run netstat from the cmd line, it will show all
active connections to your pc.

-> On July 2nd I turned on my XP computer, logged into my account
-> and noticed the LEDs on the DSL Modem and Router were blinking.

-> I just thought I was getting a Virus Signature Update or something like
-> that so I let it go on.

-> Later I right clicked on NetMeter on the Taskbar and chose the Totals
-> option so I could see if something was being Uploaded From my computer
-> or if it was being Downloaded To my computer.

-> The NetMeter screen showed that Very Little had been Uploaded From my
-> computer but the Download section had a fairly large number in it but I
-> allowed it to continue........

-> Until the Download size got to 60 Megabytes.

-> Then I got a little worried what was being downloaded to my computer so
-> I decided to Turn Off The Computer, and turn off the UPS that
-> supplies the computer, DSL Modem and Router with AC Power.

-> When I turned the UPS and the computer back on a minute later the LEDs
-> on the DSL Modem and Router were not blinking.

-> Whatever the download was, it didn't start up again, and hasn't as far
-> as I have noticed in the past two days.

-> The computer has been working normally as it always has, since I stopped
-> the download the other day.

-> I can't think of any download that my computer would get that would be
-> as large as 60+ MBs.

-> I was worried that the download may have been one that would make my
-> computer part of a BotNet.

-> Lately I haven't noticed the LEDs blinking when the computer is on, so I
-> 'think' the computer is still under 'MY' control.

-> Yesterday and today I have seen a pop up that McAfee has been updated.

-> I have the Ethereal program which I think could have told me where the
-> download was coming from.

-> I looked at it yesterday but since I am unfamiliar with using it I gave
-> up trying to learn how it works.

-> I download a lot of programs but never use them or even install the
-> Setup file for the program.

-> Does anyone know if using Ethereal would be the correct way to find out
-> where a download is coming from?

-> Or what procedure should I use to investigate what Data is Coming In and
-> Going Out of my computer?

-> Thanks.


->  * SLMR 2.1a #T348 * Somehow tuna doesn't taste the same without the
dolphin.
-> --- SBBSecho 2.12-Linux
->  * Origin: telnet & http://cco.ath.cx - Dial-Up: 502-875-8938 (1:2320/105.1)
--- Platinum Xpress/Win/WINServer v3.0pr5
 * Origin: TECHWARE BBS -  Since 1995  -  www.techware.dynip.com  (1:102/401)