Laptop connecting to god knows where

dahamsta

I'm updating a Win2K laptop for a client at the moment via my LAN, which is in turn connected to a DSL connection. I thought Windows Update or my DSL connection was running slow but it turns out the laptop is using the connection on its own and hogging the bandwidth. It's possible it's something innocent because the computer used to be on a large corporate network, however I can't think of a simple way to find out where it's connecting to and what for. Any tips? I've disabled antivirus and the like, so it's not those autoupdating.

Thanks,
adam

secret_squirrel

I know this is probably waay too obvious but could the laptop have the msblaster virus on it???

phaxx

Have you tried dropping a copy of Ethereal (packet sniffer) (Need winPcap too) on it?

Capt'n Midnight

Try Windump - though you may have to turn off the firewall for it to work in XP
Windump -D .......to list interfaces
Windump -i 1 ....... list interface one
Windump -i 1 broadcast .... to look at broadcasts
http://windump.polito.it/misc/bin/

(Windump also uses winPcap too)

I found this...
00:59:39.368842 #####.1028 > ########.53: 12+ A? toolbarqueries.google.com. (43)

BigEejit

someone else had a problem earlier in the week (and I had it a few months ago) ...windows update set to automatic download .... and it might be setup to ask you do you want to install or it might install them at a predetermined time ... sneaky fecker of a thing ... my wife was playing withthe settings one day and turned it on .... off it went downloading service pack 4 etc etc ... it did ask before installing though .. but I was scratching my head before it popped up, I could see activity on the leds on the switch and it was the only thing turned on, but there was nothing running on it .... had me stumped for a while

dahamsta

Not Blaster anyway. Be a hoot if it was Windows Update, but I have it turned off. Running Housecall...

dahamsta

Found Nachia. Feckin do-gooder white hats using my bandwidth...