Dialer Problems

[Swampster]

Greetings Fellow Computer Nerds!

I am trying to help a friend who has what appears to be some sort of Dialer infecting his system, and I have hit a wall in trying to eradicate it.

At times, like when you click on something in Explorer, or maybe on its own at times, the DialUp Networking window comes up and wants to log on. I have his Norton AntiVirus up to date, and a scan shows nothing. I have tried AdAware 6 with all the latest updates, and it finds a few things, but not my problem child. I have tried SpyBot 1.3 with updates, and it finds a few more things, but not my dialer problem.

I used a USB adapter to put it onto my home network so it could go out as it pleased and observed the cookies it accumulated. The suspect ones were "softpedia.com, techtracker.com, trafic.ro, Ad2.ip.ro, and Versiontracker.com. A search of the Registry found no references to these addresses after I deleted the cookies, but it is still trying to dial out.

Any suggestions on what I might have missed???????????

 

[redshadow]

Did you try running msconfig (start >> run >> msconfig)? In the start-up tab you may find you culprit (and maybe other things that shouldn't be there)

 

[OZEE]

Try this then report back

 

[Swampster]

RedShadow,

Yes, I had already looked in MSCONFIG, as well as REGEDIT for strange RUN items in their various locations without any success . . . but thanks for reminding me of that very handy tool as others might not know of its usefulness.

OZEE,
Nice list of additional programs to try. I will download them and give a report back as soon as I have had a chance to run them. As noted, I had already used AdAware and SpyBot S&D.

 

[Tango57]

also try going into your system32 folder in c:\windows and check for any conspicuous programs that don't belong there. a lot of spyware often ends up getting installed and hiding in there.

 

[OZEE]

But be careful doing that ^^^^^^ because there's alot of stuff in that folder that *DOES* belong there. If you don't know what doesn't belong there this could be asking for trouble...

 

[Kato]

Does he have Quicken installed? I think its auto update feature uses a program called Qagent to automatically access DUN.