TechSpot

msn messenger constantly sending data

By wallie_s
Mar 23, 2007
  1. Hi,
    This just happened in the last day or so. Whenever I open messenger my pc is constantly sending and receiving data. I don't see any other problems arising from this.
    I am not picking up any evidence of spyware or virus activity.

    I believe I have the latest ver of messenger live. I'm running adaware adwatch, AVG antivirus and have a fixed wireless connection.

    I know this is something new as I keep an eye on any activity that might be going on.

    Thanks for any ideas you may have,

    Wallie
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    It does sound a little suspicious.

    Go and read this thread HERE, then post a HJT log as an attachment into this thread.

    Regards Howard :wave: :wave:

    This thread is for the use of wallie_s only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  3. Didou

    Didou Bowtie extraordinair! Posts: 4,274

    Instant messaging programs have to regularly send data to "stay online". It's less traffic than when you're having a conversation (text, audio or video) but it's still present.
     
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    I know what you mean Didou, but I too use a messenger programme(Yahoo) and although it does access the net occasionally, it`s not that often, unless of course I`m actually speaking to someone at the time.

    Since wallie_s seems to have noticed a change in his messenger behaviour, it`s probably a good idea to run HJT and check the logfile, just in case there`s something untoward lurking.

    Regards Howard :)
     
  5. wallie_s

    wallie_s TS Rookie Topic Starter Posts: 23

    Thanks, I will download and run the hjt prog.
    Sorry but there is something else that I forgot to mention. For a couple of days at startup Lavasoft Ad-watch is telling me of a registry change which looks like this.

    03/24/2007 12:08:08 PM - Registry modification detected
    Root:HKEY_LOCAL_MACHINE
    Key:Software\Microsoft\Windows\CurrentVersion\Run
    Value:KernelFaultCheck
    Data:
    New Data:%systemroot%\system32\dumprep 0 -k

    I don't know if this could be related or not. It seems to have started after a failed shutdown of the computer. This is very rare for me so it may mean something.

    Thanks
    Wallie

    This is the log when I ran hijackthis ver 2
     
  6. zipperman

    zipperman TS Rookie Posts: 1,179   +7

    Try this

    Add/Remove/Program access.
     

    Attached Files:

    • MSN.jpg
      MSN.jpg
      File size:
      65.2 KB
      Views:
      5
  7. NetCablesPlus

    NetCablesPlus TS Maniac Posts: 228

    I have found that the free Spybot S&D will find malware that AVG and AdAware miss. Worth a try if all else fails. Usually best to run it in Safe Mode to be sure:

    http://www.spybot.info/en/index.html
     
  8. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Your HJT log is clean.

    1. Right click on the Ad-Watch icon in the system tray.
    2. At the bottom of the screen there will be two checkable items called "Active" and "Automatic".

    Active: This will turn Ad-Watch On\Off without closing it
    Automatic: Suspicious activity will be blocked automatically

    3. Uncheck both of those boxes.

    Just have HJT fix this inactive entry.

    Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    Click on the fix checked button.

    Close HJT.

    Dumprep is the Windows error reporting tool that tells you when there`s been a serious system error, creates minidumps etc and is nothing to worry about.

    Re-enable Adwatch.

    Regards Howard :)
     
  9. wallie_s

    wallie_s TS Rookie Topic Starter Posts: 23

    Thank You Howard.
    I did as you suggested but the messenger is still sending and receiving non stop.
    The interesting thing is..... if I log in to messenger as a different user it does not keep s&r. If I am not communicating it just sends and receives a bit of data occasionally.
    So It seems to be related to my profile somehow. Quite strange.


    Thanks again for you help.

    Wallie
     
  10. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    In that case, I suggest you go HERE and follow the instructions exactly.

    Post fresh HJT, AVG Antispyware and Combofix logs as attachments into this thread, only after doing the above.

    Also, let me know the results of the AVG Antirootkit scan.

    Regards Howard :)

    This thread is for the use of wallie_s only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  11. wallie_s

    wallie_s TS Rookie Topic Starter Posts: 23

    Combofix log and 2nd HJT log

    Here is the result of combofix scan and another hjt log

    Thanks,
    Wallie
     
  12. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    I still can`t see anything bad. However, I`d like you to have this checked out over at Jotti`s.

    Please visit this link http://virusscan.jotti.org/
    * Click the Browse... button
    * Navigate to the following file C:\DOCUME~1\wallie\x.exe
    * Click Open
    * Please let me know the results.

    Post an AVG Antispyware log.

    Regards Howard :)
     
  13. wallie_s

    wallie_s TS Rookie Topic Starter Posts: 23

    Thanks for all the help- All is well

    Sorry I have been so long responding. Been super busy for a few days. Yesterday when I fired up my computer my AVG antivirus warned me of a prob with AVG. Uninstalled and reinstalled and presto... all is as it should be.
    Thanks again for all your help. This forum is just super.

    Wallie
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...