Lan Problems

Tiesto

Well i have got disconnected once again by the admin on our Student campus.
The reason being that my computer (windows 2000) and 5 other students computers here (windows xp) are consistently carrying out network scans and bringing the network and internet to a halt.
I have no idea what could be doing it in my machine. i have a very minimal amount of software installed. But i do notice in the local area connection status a lot of information is being sent all the time.
Could it be some of the windows services or?? Any idea at all.
Hope ye can help me out as they wont reconnect me until the problem is fixed.
Tiesto.

Capt'n Midnight

Viruses ?

Looking for a workgroup ?
delete all entries in "My Network Places"

What is your home page in IE ?

Do you have P2P apps etc..?

Tiesto

No Virus
I rarly look for the workgroup. It never works anyway.
Homepage is blank
no p2p programs installed

kaimera

bring it into the college IT dep and let them see

Tiesto

its no ran by the college.
its private and the admin said he wont look at it.

Sleipnir

tell the admin you are trying to find out what on your system is causing this but you need to see exactly what your system is sending out. Ask for a copy of the logs.
Download spybot and run a scan.

Tiesto

ok ill give that ago.

WizZard

Aslo turn off the Simple network discovery service/protocol (SSDP) and UPnP. Boith of these can cause extra traffic and appear like portscans.

Tiesto

how do u do that.
they are integrated inside windows.

Sleipnir

Originally posted by Tiesto
how do u do that.
they are integrated inside windows.

start, settings, control panel, administrative tools, services.
stop & disable.

Tiesto

no kananga they are not in there.
This freaking sucks.
Im not the only one they turned off. THey disconnected about 6 other ppl. Mostly xp machines i think.i use 2000.
I have no idea what it cud be.

someone must know?
I wreckon it cud be a prob on the admins side.
But in the dial up networking status my computer does seem to be sending out a lot of info. I thought it cud be my computer just communicating with the server.... or something like that.

MadKevo

I'd try installling a personal firewall on your machine, this *should* let you select what services and applications talk to the internet.
I use Kerio and am pretty happy with it (although maybe there's ways around it at a low level in the OS, think I saw something bypass Kerio a while back)., when I installed it first it was a real eye-opener of just how chatty some programs are...
'Tis free too:
http://www.webattack.com/get/keriofirewall.shtml
Good luck,
/MK.

Tiesto

well i have zone alarm installed.
Computer stills seems to be sending out a good few packets tho.
Was told by the admin to download bazooka and spywave scanner
I have Search and destroy tho
wud it not be better?
gonna give bazooka a go anyways.

ando

give Tiny Personal Firewall a go. It pops up when something is trying to leave or enter your PC. JUST HIT NOOOOOOO for anything that you don't know. That will sort you out (YOU, not everyone else.,.... maybe the admins are treating you as an IP scope and not as individual PC's)

Tiesto

ok well i did the scan with bazooka this morning,
and it found a worm.

found the same worm on my friends computer, he is also on the lan.

its the real popular worm.cant remember the name of it.
It makes a dllhost.exe and svchost.exe. Obviously called the same as windows file so its harder to find.

and it connectes to microsoft and trys to download something.
and Smetimes restarts the computer. cant remember what else it does.
..... so i reckon its what was calling the problem.