|
|
stefanmoran@xxxxxxxxx wrote:
|>Hello,
|>
|>Recently my computer started sending packets over the net as soon as
|>it's booted.
|>
|>A packet capture with Ethereal tells me that the packets are always the
|>same size 197 Bytes, same LLC protocol with the same HEX data.
|>
|>I've run the standard computer scrubbing tools for Trojans, Viruses,
|>Adware, Spyware, etc. with everything giving my comp a clean bill of
|>health (will post HJT file if required).
|>
|>Security Task Manager shows only my AVS suite, JAVA, Printer and
|>Windows processes as being active. I'm running Win2k SP4, have a
|>D-Link DI-424 Wi-Fi router with WEP128 key and MAC recognition on and
|>Firewall enabled, have the standard mix of AVS, Spamware, firewalls
|>working.
|>
|>All the software have the most recent definitions and I have the latest
|>security patchs from Microsoft (I know still isn't enough with MS).
|>
|>So I'm looking for an app that will allow me to...
|>1. Track what software on my system sending packets (size, protocol,
|>ports, etc.)
|>2. Track where the packets are being sent to (IP, Whois, etc.)
|>3. Any info to shed light on how to correct this problem (better
|>security for my comp other then having to go to Linux or Mac)
http://www.sysinternals.com/Utilities/TcpView.html
Double click on process to show program in use, Right click on process
for Whois.
--
Quantum Physics Double Slit Experiment
http://tinyurl.com/pd9gy
|
|