Modem wont stop sending and recieveing .

Ok i use a dial up modem cause i cant get dsl or anything here. Anyway recently my connection has been messing up. it keeps sending and recieveing and i cant figure out whats it sending and recieveing to. Ive scaned it with AVG, Spybot, Ad-Aware, Crap cleaner all fully updated and its clean and doesnt find anything. It has to be somthing tho i just cant figure out what its doing. Is there a program they is made for figureing this problem out?

 

Is anything running like any P2P softwares.
Maybe its an update manager updating something?

 

no its not i just did a full reinstall and it still doing it =/ i have nothing going using the net =/

 

... this shit always happens to me. I know alot about pc and how to keep them clean. there is somthing using my dial up and i cant find out what it is! i tryed 2 diffrent modems reinstalled cleaned all the unwanted stuff. updated and it still does it. i didnt download IE7 but that optional i dont think thats why it keeps uploading -_- I cant get highspeed and this is very dipressing that my dial up is 4x slower. because something is access the web...

 

i used hijack this and got a log so maybe someone can tell me whats going on....

Logfile of HijackThis v1.99.1
Scan saved at 12:25:56 AM, on 3/25/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\dllhost.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\HP_Administrator\My Documents\Xenokai's Programs\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=63&bd=PAVILION&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=63&bd=PAVILION&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=63&bd=PAVILION&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=63&bd=PAVILION&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=63&bd=PAVILION&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=63&bd=PAVILION&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=63&bd=PAVILION&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=63&bd=PAVILION&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=63&bd=PAVILION&pf=desktop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=EN_US&c=63&bd=PAVILION&pf=desktop
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
O4 - HKLM\..\Run: [ALCMTR] ALCMTR.EXE
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O8 - Extra context menu item: Download with GetRight Pro - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Pro Browser - C:\Program Files\GetRight\GRbrowse.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1174775606815
O17 - HKLM\System\CCS\Services\Tcpip\..\{CB480DF7-1694-488E-BE93-09AEB51EA01C}: NameServer = 198.6.100.218 198.6.1.218
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

 

that means sweet fa to me but im sure the guys in the virus thread can tell what it is.

http://forums.afterdawn.com/forum_view.cfm/166

 

First off my copy of windows xp media center ed 2005 is purely a legal copy that came with my pc. Ok this is VERY ODD and i think MS is trying to MAKE people get vista. Because soon as i download the genuie validation update the sending and uploading start and never stops. Its not updating it does it not matter if it off or on. ive ended proccess. First off i reinstalled windows and updated windows and then it still did it. so i reinstalled AGAIN this time once i had all the junk deleted from the install like i always do i check to see if it happend.

It didnt so i set a restore point and installed MSN messanger and BAM it started AGAIN. so i did a restore and it got rid of it. So i thought it was just the msn 7.5 i was installing so i decided to set a restore point and then start updating. It had to download the validating stuff first and it got done when that did i tested the connection and BAM it did it again. updates turned off and it still did it. Nothing running to cause it either. so i restored it and it fixed it now im stuck with no updates if i update it will install the bug. I REALLY wish i new what was going on but i knoe for sure its not a update thing its just something MS must of added in a recent validation update. Most people on DSL wouldnt notice this. but on dial up its a HUGE hassle. Anyone know anything please tell me.

 

Install a seperate firewall software, I use Agnitum Outpost.
Then put a full block on Internet access, so the PC is totally locked down.
Make sure that there are no hidden applications that have by passed the firewall and still accessing the net.

Then manually start to allow access to each application that you want to use.

Best get a bit of paper and write down the full list of applications that are running and keep a clear record, so you won't get confused as to what you've done.

There is a free version of Outpost avaibale to download, but i'm not sure how user configurable it is.

You could also DL enditall2, it will show all the applications that are running, and allow you to close them all without accidentally closing a required element that will crash the PC.

 

Possible culprits i see are msn, aim, Getright and the dreaded WGA.

 

its a problem with the windows update MS seems to be doing this now i guess to force vista on people. Ive did a full reinstall with nothing connected or installed of mine. soon as i installed msn 7.5 client it started. so i restored my pc back before i installed it fixed it. then i updated the first update which where the newer update client and genuine validation soon as i got those installed i shut it off then redialed and BAM it did it again. so i restored it disabled all updating from windows and i guess im stuck with a un updated pc =/ My pc is winxp media center 2005 it has sp2 already so i guess im fine for now. just so very upsetting MS would do this. Ims ure if your pc's are updated it is also sending data and stuff to ms but on highspeed its not gonna be noticable. i suggest you check your status icon and see if it blinks. It maybe just a update for media center edition.

 

whats WGA? is that bad?

 

my pc isnt black market at all got this pc liek 7 months ago at best buy. im able to get all he update but for some reason i gues wga monitors the pc which causes massive lag for my slow connection.

 

Turn off automatic updates.
Also I would suggest you look at the teak guide for XP and work yor way through it.

http://www.tweakguides.com/TGTC.html

 

i tryed turning updates off its somthing update do. did did a sys restore and didnt update anything so far its ok but wish i didnt have to be outdated. ill try to check the guides