why is my computer flooding my internet?

[Emi2]

My internet provider had to turn off my connection because my computer was sending too many packets...I'm trying to fix it so they turned my net back on - I've run AVG like I do everyday, Adaware, Spybot...nothing....
What is going on?

[duge]

You may have a virus. go to PcCillin.com run a on-line scan, just one thought.

[wheelchairTITAN]

You may have picked up a hacker who is using your computer to send out spam email without your knowing.

It may well be that someone has taken over )partial) control of your computer (perhaps through an open port) and are using it as a remote server. There are many ways this can happen.

The solution may ... unfortunately ... be reformatting your hard drive and reinstalling your OS and all operating/software programs.

You might find he problem by analysis of your "root kit" files ... but that has to be done line by line.

William

[Emi2]

You may have picked up a hacker who is using your computer to send out spam email without your knowing.

It may well be that someone has taken over )partial) control of your computer (perhaps through an open port) and are using it as a remote server. There are many ways this can happen.

The solution may ... unfortunately ... be reformatting your hard drive and reinstalling your OS and all operating/software programs.

You might find he problem by analysis of your "root kit" files ... but that has to be done line by line.

William

yikes, guess I'll buy some dvds today to back everything up and then reformat.

[wheelchairTITAN]

You might try this program ... but PC tools programmes want money to be of any use.

http://www.pctools.com/spyware-doctor/?ref=google_rootkit&gclid=COGh9biFwY4CFQGdPAodvCUrwg

Here is some general information on rootkit ... from Wikipedia...
A rootkit is a general description of a set of programs (http://en.wikipedia.org/wiki/Computer_program) which work to subvert control of an operating system from its legitimate operators. Usually, a rootkit will obscure its installation and attempt to prevent its removal through a subversion of standard system security (http://en.wikipedia.org/wiki/Computer_security). Techniques used to accomplish this can include concealing running processes, files or system data from the operating system (http://en.wikipedia.org/wiki/Operating_system).[1] (http://en.wikipedia.org/wiki/Rootkit#_note-0) Rootkits have their origin in benign (http://en.wikipedia.org/wiki/Benign) applications, but in recent years have been used increasingly by malware (http://en.wikipedia.org/wiki/Malware) to help intruders maintain access to systems while avoiding detection. Rootkits exist for a variety of operating systems, such as Microsoft Windows (http://en.wikipedia.org/wiki/Microsoft_Windows), Mac OS X (http://en.wikipedia.org/wiki/Mac_OS_X)[2] (http://en.wikipedia.org/wiki/Rootkit#_note-1) [3] (http://en.wikipedia.org/wiki/Rootkit#_note-2) , Linux (http://en.wikipedia.org/wiki/Linux) and Solaris (http://en.wikipedia.org/wiki/Solaris_%28operating_system%29). Rootkits often modify parts of the operating system or install themselves as drivers (http://en.wikipedia.org/wiki/Device_driver) or kernel modules (http://en.wikipedia.org/wiki/Loadable_kernel_module). http://en.wikipedia.org/wiki/Rootkit

[PN]

RootkitRevealer v1.71
By Bryce Cogswell and Mark Russinovich
Published: November 1, 2006
Introduction

RootkitRevealer is an advanced rootkit detection utility. It runs on Windows NT 4 and higher and its output lists Registry and file system API discrepancies that may indicate the presence of a user-mode or kernel-mode rootkit. RootkitRevealer successfully detects all persistent rootkits published at www.rootkit.com, including AFX, Vanquish and HackerDefender (note: RootkitRevealer is not intended to detect rootkits like Fu that don't attempt to hide their files or registry keys). If you use it to identify the presence of a rootkit please let us know!

The reason that there is no longer a command-line version is that malware authors have started targetting RootkitRevealer's scan by using its executable name. We've therefore updated RootkitRevealer to execute its scan from a randomly named copy of itself that runs as a Windows service. This type of execution is not conducive to a command-line interface. Note that you can use command-line options to execute an automatic scan with results logged to a file, which is the equivalent of the command-line version's behavior.
Top of pageTop of page
What is a Rootkit

The term rootkit is used to describe the mechanisms and techniques whereby malware, including viruses, spyware, and trojans, attempt to hide their presence from spyware blockers, antivirus, and system management utilities. There are several rootkit classifications depending on whether the malware survives reboot and whether it executes in user mode or kernel mode.

http://www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx

[Emi2]

thanks, i think this is way beyond my computer skills though. i will back up and reformat - any tips on backing everything up more easily?
I wonder how this happened? I have a router, but set up keys and stuff...

[Patonb]

Ask the isp for a new IP as well. It's not above you, but you are compromised for sure, so format is the way to go.

As you have a router, you probably did it to yourself. D/l'ng stuff usually is what does it.

The easiest way to get you're stuff would be to buy a 2nd hard drive and an extrnal case and just plug it in, and copy pAste stuff.

Not sure what DVD's cost, or how many disks, but Bestbuy (http://www.bestbuy.com/site/olspage.jsp?id=pcat17080&type=page&qp=crootcategoryid%23%23-1%23%23-1~~q70726f63657373696e6774696d653a3e313930302d3031 2d3031~~cabcat0500000%23%230%23%2311a~~cabcat05040 00%23%230%23%233y~~cabcat0504001%23%230%23%232d~~n f408%7C%7C243530202d202439392e3939&list=y&nrp=15&sc=abComputerSP&sp=%2Bbrand+skuid&usc=abcat0500000) has 160G for under 100 bucks... Plus now adays, you can never have nough room!

[Raccoon]

do you have a firewall turned on? I don't mean the Windows firewall -- I'm not really very trusting of Microsoft & the Internet.

Go to zonelabs.com and get their free version. At least, that's my suggestion.

[Emi2]

I did just have windows firewall, so thannks for that suggestion Raccoon. I rarely download stuff so it's kinda strange but whatever, I filled 9 cds with photos and videos (love love love photoshops backup tool!), a 2gb flashdrive with documents etc. Gonna reformat tommorow now that I found my copy of XP.
It was about time to organize my files etc. again anyhow and at least I was able to back everything up!

[wheelchairTITAN]

You may have picked up a hacker who is using your computer to send out spam email without your knowing.

It may well be that someone has taken over )partial) control of your computer (perhaps through an open port) and are using it as a remote server. There are many ways this can happen.

The solution may ... unfortunately ... be reformatting your hard drive and reinstalling your OS and all operating/software programs.

You might find he problem by analysis of your "root kit" files ... but that has to be done line by line.

WilliamWell some where, some time yesterday I picked up my own SPAM takeover virus. Like you I too received an email from my provider saying they were putting my email on "restricted access" for 24 hours. :thinking:

Spent all of tonight reformatting and reinstalling my OS and all my programs.

Lost all my iTUNES which will have to be reinstalled. :(

[JustinB]

If you have ever purchased anything with itunes, remember to deauthorize your computer and back up your purchases before formatting or you will lose them.

-- JB