Constant upstream indicator

[mondy]

I feel as though data is in a constant stream from computer. The icon that shows my Local Area Connection is constantly lit and the # of packets being sent are constantly growing. This has never happened before. I have a router between my XP box and my cable modem and both activity lights on those devices are constant as well, so I know data is going to the Internet. How do I find out where it's going and what the data is? Please help. thanks!

 

[imquazar]

Scan your system for the Welchia32 virus. It's a variant of the MSBLASTER worm..
Symantec has a file on their site called FixWelch.
If you can get it and run it, it'll fix the problem and clean the files.. you should see things settle down a bit after that.

If that doesn't do it, then you may have a different type of virus or maybe even some type of spyware.
Visit

http://www.lurkhere.com

for a download called SPYBOT Search & Destroy. install and run this program to detect/disable spyware.

Aside from that, If you're on a broadband connection, it's a good idea to have a firewall in place, either a hardware router, or a software firewall such as zonealarm.

-IQ

 

[imquazar]

Oops - I missed the part about you already having a router!

 

[mondy]

At least I think I'm on the right track. I had gotten the welchia Fix from Symantec's website and when I ran it, it said the welchia virus was not found. I am running SPyBot and I just ran it yesterday and deleted 3 cookies that it found. Is there any type of log that keeps track of this kind of stuff in XP?

 

[gpalmer711]

Visit

Http://housecall.antivirus.com

and run the scan it often finds things that norton does not.

Also visit

http://tomcoyote.org/hjt

and download Hijack This. Then visit

http://www.spywareinfo.com/~merijn/htlogtutorial.html

and read the infomation there.

You can always post the Hijack This log file here for advice.

Greg Palmer

----------------------------------------
Any feed back is appreciated.

 

[mondy]

I ran the housecall scan again from Trend Micro (I had just run this scan on Friday and found nothing). This time it found the nachi or nachia virus. It was able to clean it. It looks like the problem is solved for now. Thanks guys!