Re: Dial-up Connection popsup automatically

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: M. Tee (MTee_at_discussions.microsoft.com)
Date: 02/17/05 

Date: Thu, 17 Feb 2005 04:35:03 -0800

"Jan Il" wrote:

> HI M. Tee :-)
>
> Then you have malware on your system and need to remove it. Work through
> the steps in the following information. Even if you have already run some
> programs, run them again according to the instructions in the information
> below to thoroughly clean you system. Some variants of malware can
> replicate itself and return repeatedly if not cleaned properly. It is best
> to read through all the information before you start to know before hand
> what you need to do and how. Follow all instructions to letter as much as
> possible.
>
> WARNING>>>> Backup all documents and files before removing any spyware!!
>
> Dealing with Unwanted Spyware and Parasites:
> http://mvps.org/winhelp2002/unwanted.htm
> What You Should Know About Spyware
> http://www.microsoft.com/athome/security/spyware/devioussoftware.mspx
> What you can do about spyware and other unwanted software
> http://www.microsoft.com/athome/security/spyware/spywarewhat.mspx
> Most importantly, be sure to run CWShredder here
> http://www.majorgeeks.com/download3019.html
> Also this program searches for hidden .dlls that recreate the malware.
> About Buster:
> http://www.majorgeeks.com/download4289.html
> Then visit these two sites to test for parasites and help basic cleaning:
> On-Line Check
> http://aumha.org/a/noads.htm
> and
> Quick-Fix Protocol.
> http://aumha.org/a/quickfix.php
> Basically, throw everything here at your "infection".
>
> Also very important, be sure to use the HijackThis. Please DO NOT post your
> log to this
> newsgroup, but to the HiJackThis Support Forums below:
> http://www.hijackthis.de/forum/forumdisplay.php?f=10&guestlanguageid=4
> the Aumha HiJackThis Forum
> http://forum.aumha.org/viewforum.php?f=30
> or Bleeping Computer Forum
> http://www.bleepingcomputer.com/forums/forum22.html
> to allow the experts there to evaluate your log and advise you of any
> necessary steps to clean your system.
> (Note: You will have to Register before posting on these Forums. Please
> follow all posting instructions carefully to avoid having your log deleted
> or ignored.
>
> CAUTION!!!!! Before you try to remove spyware using any of the programs
> below, download a copy of LSPFIX from any of the following sites:
> http://www.cexx.org/lspfix.htm
> http://www.spychecker.com/program/winsockxpfix.html
> (if your OS is Win2k or XP) The process of removing certain malware may kill
> your internet connection. If this should occur, this program, LSPFIX, will
> enable you to regain your connection.
>
> You should also get a copy of WINSOCKXPFIX available at:
> http://www.spychecker.com/program/winsockxpfix.html
> and
> WinsockXP Fix- WinXP
> http://www.spychecker.com/program/winsockxpfix.html
> with instructions, at
> http://www.iup.edu/house/resnet/winfix.shtm
> also... From LavaSoft- all versions of Windows-
> http://digital-solutions.co.uk/lavasoft/whndnfix.zip
> (NOTE: It is reported that in XP SP2, the command netsh winsock reset
> will fix this problem without the need for these programs.)
> or Winsock Fix Utility
> http://www.dfwonline.net/files/WinsockFix.zip
>
> NOTE: If you can not download these programs from the Internet, if your PC
> has CD read capabilities, go to another computer with CD-ROM burning
> capabilities. Create a folder on the hard drive of the other computer called
> HOLD, download the programs to that folder, then burn that folder to a CD.
> Copy the HOLD folder to your HD and then install the programs from there
> and run them. After you have IE access again, update all programs where
> possible to get the latest definitions and run them again in Safe Mode to be
> sure there are no lingering items on the system.
>
> Hope this helps
>
> Jan :)
> Smiles are meant to be shared,
> that's why they're so contagious.
>
> Replies are posted only to the newsgroup for the benefit or other readers.
> How to make a good newsgroup post:
> http://www.dts-l.org/goodpost.htm
>
>
> >
> > "Jan Il" wrote:
> >
> >> Hi M. Tee :-)
> >>
> >> Try the following and see if it helps:
> >>
> >> Open IE>Tools>Internet Options>Connections
> >> Check the "Dial whenever a connection is not present"
> >> Apply > OK out.
> >>
> >> Note: If you are leaving IE connection running for a long time, some
> >> Internet Service Providers (ISP's) will drop connections automatically if
> >> there is no activity on the account.
> >>
> >> also..
> >>
> >> Start>Settings> Control Panel>Network and Dial-up Connections>Local Area
> >> Connection>Properties>Configure>Power Management tab>uncheck "Allow the
> >> computer to turn off this device to save power."
> >>
> >> and....
> >>
> >> My dialup settings keep changing from 'never dial' to 'always dial' or
> >> 'always dial' to 'never dial
> >> http://inetexplorer.mvps.org/answers2.htm#connection_change
> >>
> >>
> >> Hope this helps
> >>
> >> Jan :)
> >> Smiles are meant to be shared,
> >> that's why they're so contagious.
> >>
> >> Replies are posted only to the newsgroup for the benefit or other
> >> readers.
> >> How to make a good newsgroup post:
> >> http://www.dts-l.org/goodpost.htm
> >>
> >>
> >> > The "Dial-up Connection" box pops up automatically. This happens at
> >> > startup
> >> > and when I return from being on standby. How do I get this to stop?
> >> >
> >> > TIA
> >> >
> >> >
> >>
> >>
> >>
> >
> > Hi Jan,
> >
> > I tried your suggestions and none of them worked. I have a feeling that
> > this pop up is started by something in the startup program. It is the
> > last
> > thing that comes onto the screen when I boot up my computer and is on the
> > screen when I return from standby. If I click on the connect button of
> > this
> > pop up a trojan horse virus is placed on my system. If I cancel the pop
> > up I
> > can use my Explorer as usual.
> >
> >
>
>
>

Hi Jan,

Thanks for all the information. At the MajorGeeks.com site I downloaded a
registry cleaner program and it seems to have done the job.

M. Tee

Quantcast