How to tell who is trying to dial my phone?

[mike]

Win98SE
I use Netscape 7 instead of IE.

If I let the computer sit for a while, I come back to a dialup
networking box asking for permission to dial the phone.
How do I determine who is trying to dial the phone so I can put a stop
to it? I have automatic updates turned off on everything I could find.

I ran a process monitor then let it dial. Got some activity on
MS_webcheckmonitor, but that's hardly conclusive.

A related issue is that I sometimes get dialog boxes telling me that
a program has stopped responding, but gives no clue as to which program.
Hard to diagnose a problem with no info.
Is there a way to figger that out too?

Thanks, mike
--
Return address is VALID but some sites block emails
with links. Delete this sig when replying.

FS 500MHz Tek DSOscilloscope TDS540 Make Offer
Wanted 12" LCD for Compaq Armada 7770MT.
Bunch of stuff For Sale and Wanted at the link below.
MAKE THE OBVIOUS CHANGES TO THE LINK
ht<removethis>tp://www.geocities.com/SiliconValley/Monitor/4710/

[Ingeborg]

mike > wrote in :

> Win98SE
> I use Netscape 7 instead of IE.
>
> If I let the computer sit for a while, I come back to a dialup
> networking box asking for permission to dial the phone.
> How do I determine who is trying to dial the phone so I can put a stop
> to it? I have automatic updates turned off on everything I could find.
>
> I ran a process monitor then let it dial. Got some activity on
> MS_webcheckmonitor, but that's hardly conclusive.
>
> A related issue is that I sometimes get dialog boxes telling me that
> a program has stopped responding, but gives no clue as to which program.
> Hard to diagnose a problem with no info.
> Is there a way to figger that out too?
>
> Thanks, mike

Install a firewall (zonealarm free for instance
<http://www.oldversion.com/program.php?n=zalarm>) and let it dial. The
firewall will tell you which program tries to access the internet.

[techguy]

Have you checked the taskmaster for active applications, that could hint
you something


--
techguy
------------------------------------------------------------------------
techguy's Profile: http://forums.techarena.in/member.php?userid=6552
View this thread: http://forums.techarena.in/showthread.php?t=186633
Visit - http://forums.techarena.in/archive/index.php/ | http://www.techarena.in

[mike]

Ingeborg wrote:
> mike > wrote in :
>
>
>>Win98SE
>>I use Netscape 7 instead of IE.
>>
>>If I let the computer sit for a while, I come back to a dialup
>>networking box asking for permission to dial the phone.
>>How do I determine who is trying to dial the phone so I can put a stop
>>to it? I have automatic updates turned off on everything I could find.
>>
>>I ran a process monitor then let it dial. Got some activity on
>>MS_webcheckmonitor, but that's hardly conclusive.
>>
>>A related issue is that I sometimes get dialog boxes telling me that
>>a program has stopped responding, but gives no clue as to which program.
>>Hard to diagnose a problem with no info.
>>Is there a way to figger that out too?
>>
>>Thanks, mike
>
>
> Install a firewall (zonealarm free for instance
> <http://www.oldversion.com/program.php?n=zalarm>) and let it dial. The
> firewall will tell you which program tries to access the internet.

Thanks,
I have zonealarm installed. The firewall log shows only blocked
accesses. There's nothing interesting in the program log. Maybe I just
don't have it set up right??

Nothing identifiable in the task monitor except the MS_webcheckmonitor
mentioned above. But there is a LOT of stuff in there that I don't
understand.
mike

--
Return address is VALID but some sites block emails
with links. Delete this sig when replying.
..
Wanted, PCMCIA SCSI Card for HP m820 CDRW.
FS 500MHz Tek DSOscilloscope TDS540 Make Offer
Wanted 12" LCD for Compaq Armada 7770MT.
Bunch of stuff For Sale and Wanted at the link below.
MAKE THE OBVIOUS CHANGES TO THE LINK
ht<removethis>tp://www.geocities.com/SiliconValley/Monitor/4710/

[PA Bear]

By any change did you switch to Netscape because IE wasn't working?
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE) & Security

mike wrote:
> Win98SE
> I use Netscape 7 instead of IE.
>
> If I let the computer sit for a while, I come back to a dialup
> networking box asking for permission to dial the phone.
> How do I determine who is trying to dial the phone so I can put a stop
> to it? I have automatic updates turned off on everything I could find.
>
> I ran a process monitor then let it dial. Got some activity on
> MS_webcheckmonitor, but that's hardly conclusive.
>
> A related issue is that I sometimes get dialog boxes telling me that
> a program has stopped responding, but gives no clue as to which program.
> Hard to diagnose a problem with no info.
> Is there a way to figger that out too?
>
> Thanks, mike

[Buffalo]

"mike" > wrote in message
...
> Ingeborg wrote:
> > mike > wrote in :
> >
> >
> >>Win98SE
> >>I use Netscape 7 instead of IE.
> >>
> >>If I let the computer sit for a while, I come back to a dialup
> >>networking box asking for permission to dial the phone.
> >>How do I determine who is trying to dial the phone so I can put a stop
> >>to it? I have automatic updates turned off on everything I could find.
> >>
> >>I ran a process monitor then let it dial. Got some activity on
> >>MS_webcheckmonitor, but that's hardly conclusive.
> >>
> >>A related issue is that I sometimes get dialog boxes telling me that
> >>a program has stopped responding, but gives no clue as to which program.
> >>Hard to diagnose a problem with no info.
> >>Is there a way to figger that out too?
> >>
> >>Thanks, mike
> >
> >
> > Install a firewall (zonealarm free for instance
> > <http://www.oldversion.com/program.php?n=zalarm>) and let it dial. The
> > firewall will tell you which program tries to access the internet.
>
> Thanks,
> I have zonealarm installed. The firewall log shows only blocked
> accesses. There's nothing interesting in the program log. Maybe I just
> don't have it set up right??
>
> Nothing identifiable in the task monitor except the MS_webcheckmonitor
> mentioned above. But there is a LOT of stuff in there that I don't
> understand.
> mike
>
> --
> Return address is VALID but some sites block emails
> with links. Delete this sig when replying.
> .
> Wanted, PCMCIA SCSI Card for HP m820 CDRW.
> FS 500MHz Tek DSOscilloscope TDS540 Make Offer
> Wanted 12" LCD for Compaq Armada 7770MT.
> Bunch of stuff For Sale and Wanted at the link below.
> MAKE THE OBVIOUS CHANGES TO THE LINK
> ht<removethis>tp://www.geocities.com/SiliconValley/Monitor/4710/

In ZA, open up the Programs tab and you should be able to find out which
programs have been granted access to the internet.
It should be in there.

[mike]

PA Bear wrote:
> By any change did you switch to Netscape because IE wasn't working?

I've never used IE.
I like the Netscape Tabbed Browsing.
And I don't like giving anything MS access my system if I can help it.
Wouldn't even use the OS if I had a viable alternative...but I digress...
mike

--
Return address is VALID but some sites block emails
with links. Delete this sig when replying.
..
Wanted, PCMCIA SCSI Card for HP m820 CDRW.
FS 500MHz Tek DSOscilloscope TDS540 Make Offer
Wanted 12" LCD for Compaq Armada 7770MT.
Bunch of stuff For Sale and Wanted at the link below.
MAKE THE OBVIOUS CHANGES TO THE LINK
ht<removethis>tp://www.geocities.com/SiliconValley/Monitor/4710/

[PA Bear]

Does IE work?

mike wrote:
> PA Bear wrote:
> > By any change did you switch to Netscape because IE wasn't working?
>
> I've never used IE.
> I like the Netscape Tabbed Browsing.
> And I don't like giving anything MS access my system if I can help it.
> Wouldn't even use the OS if I had a viable alternative...but I digress...
> mike

[mike]

PA Bear wrote:
> Does IE work?

That depends on what you mean by "work"?
My personal opinion, by my definition, is NO!
I deleted iexplore.exe so it "can't work" in my system.
mike

>
> mike wrote:
>
>> PA Bear wrote:
>> > By any change did you switch to Netscape because IE wasn't working?
>>
>> I've never used IE.
>> I like the Netscape Tabbed Browsing.
>> And I don't like giving anything MS access my system if I can help it.
>> Wouldn't even use the OS if I had a viable alternative...but I digress...
>> mike
>



--
Return address is VALID but some sites block emails
with links. Delete this sig when replying.
..
Wanted, PCMCIA SCSI Card for HP m820 CDRW.
FS 500MHz Tek DSOscilloscope TDS540 Make Offer
Wanted 12" LCD for Compaq Armada 7770MT.
Bunch of stuff For Sale and Wanted at the link below.
MAKE THE OBVIOUS CHANGES TO THE LINK
ht<removethis>tp://www.geocities.com/SiliconValley/Monitor/4710/

[sf]

On Wed, 01 Jun 2005 04:29:08 -0700, mike wrote:

> Win98SE
> I use Netscape 7 instead of IE.
>
> If I let the computer sit for a while, I come back to a dialup
> networking box asking for permission to dial the phone.
> How do I determine who is trying to dial the phone so I can put a stop
> to it? I have automatic updates turned off on everything I could find.
>
> I ran a process monitor then let it dial. Got some activity on
> MS_webcheckmonitor, but that's hardly conclusive.

If something is trying to dial out and you don't have a clue what it
is... the first thing you should do is run AdAware. Did you do it?
>
> A related issue is that I sometimes get dialog boxes telling me that
> a program has stopped responding, but gives no clue as to which program.
> Hard to diagnose a problem with no info.
> Is there a way to figger that out too?
>
What did task manager (ctrl > alt > del) say?

[PA Bear]

IE is an integral part of Windows. If you were in fact able to "delete"
IEXPLORE.EXE, your machine wouldn't work.
--
~PA Bear

mike wrote:
> PA Bear wrote:
> > Does IE work?
>
> That depends on what you mean by "work"?
> My personal opinion, by my definition, is NO!
> I deleted iexplore.exe so it "can't work" in my system.
> mike
>
> >
> > mike wrote:
> >
> > > PA Bear wrote:
> > > > By any change did you switch to Netscape because IE wasn't working?
> > >
> > > I've never used IE.
> > > I like the Netscape Tabbed Browsing.
> > > And I don't like giving anything MS access my system if I can help it.
> > > Wouldn't even use the OS if I had a viable alternative...but I
> > > digress... mike

[mike]

PA Bear wrote:
> IE is an integral part of Windows. If you were in fact able to "delete"
> IEXPLORE.EXE, your machine wouldn't work.

It's nice to have experts to help me.
I checked again. It's renamed iexploreold.exe
Searched the C drive for iexplore.exe. It AIN'T there.
I explained to my computer that you said it couldn't work
without iexplore.exe...but it just laughed and kept
right on working. Should I break it's little circuit boards
for insubordination?

Now, there may be some things which rely on IE to talk to microsoft
when I'm not lookin' that no longer work.
And that's exactly why I deleted it. And why I want to know who is
trying to dial the phone.

mike

[mike]

sf wrote:
> On Wed, 01 Jun 2005 04:29:08 -0700, mike wrote:
>
>
>> Win98SE
>> I use Netscape 7 instead of IE.
>>
>> If I let the computer sit for a while, I come back to a dialup
>> networking box asking for permission to dial the phone.
>> How do I determine who is trying to dial the phone so I can put a stop
>> to it? I have automatic updates turned off on everything I could find.
>>
>> I ran a process monitor then let it dial. Got some activity on
>> MS_webcheckmonitor, but that's hardly conclusive.
>
>
> If something is trying to dial out and you don't have a clue what it
> is... the first thing you should do is run AdAware. Did you do it?
>
>>
>> A related issue is that I sometimes get dialog boxes telling me that
>> a program has stopped responding, but gives no clue as to which program.
>> Hard to diagnose a problem with no info.
>> Is there a way to figger that out too?
>>
>
> What did task manager (ctrl > alt > del) say?

Well...it says lots of stuff, 23 to be exact. Taskmonitor tells me
there are 117 threads running. If I could tell anything from that, I
wouldn't have asked the question. Can you give me pointers on what to
look for to associate dialing the phone with a thread that initiated it??

Process of elimination ain't gonna work. Takes too long for the
symptom to show up. We'd have three new versions of windows before I
figgered it out.

Thanks, mike

--
Return address is VALID but some sites block emails
with links. Delete this sig when replying.
..
Wanted, PCMCIA SCSI Card for HP m820 CDRW.
FS 500MHz Tek DSOscilloscope TDS540 Make Offer
Wanted 12" LCD for Compaq Armada 7770MT.
Bunch of stuff For Sale and Wanted at the link below.
MAKE THE OBVIOUS CHANGES TO THE LINK
ht<removethis>tp://www.geocities.com/SiliconValley/Monitor/4710/

[sf]

On Fri, 03 Jun 2005 18:54:15 -0700, mike wrote:

> > What did task manager (ctrl > alt > del) say?
>
> Well...it says lots of stuff, 23 to be exact.
> Taskmonitor tells me there are 117 threads running.
> If I could tell anything from that, I
> wouldn't have asked the question.

You could begin with http://startup.iamnotageek.com/ enter the
process into the search box and click "go".

> Can you give me pointers on what to
> look for to associate dialing the phone with a thread that initiated it??
>
It still sounds like spyware. If you've already run Aware and scanned
for viruses, download a copy of HijackThis and use the HijackThis
automated log analyzer available via hyperlink at the above URL.

[mike]

sf wrote:
> On Fri, 03 Jun 2005 18:54:15 -0700, mike wrote:
>
>
>> > What did task manager (ctrl > alt > del) say?
>>
>> Well...it says lots of stuff, 23 to be exact.
>> Taskmonitor tells me there are 117 threads running.
>> If I could tell anything from that, I
>> wouldn't have asked the question.
>
>
> You could begin with http://startup.iamnotageek.com/ enter the
> process into the search box and click "go".
>
>
>> Can you give me pointers on what to
>> look for to associate dialing the phone with a thread that initiated it??
>>
>
> It still sounds like spyware. If you've already run Aware and scanned
> for viruses, download a copy of HijackThis and use the HijackThis
> automated log analyzer available via hyperlink at the above URL.

Thanks for the pointers. Nothing found by the analyzer.
Guess I'll quit worrying about it.
mike

--
Return address is VALID but some sites block emails
with links. Delete this sig when replying.
..
Wanted, PCMCIA SCSI Card for HP m820 CDRW.
FS 500MHz Tek DSOscilloscope TDS540 Make Offer
Wanted 12" LCD for Compaq Armada 7770MT.
Bunch of stuff For Sale and Wanted at the link below.
MAKE THE OBVIOUS CHANGES TO THE LINK
ht<removethis>tp://www.geocities.com/SiliconValley/Monitor/4710/

[Ingeborg]

mike > wrote in :

> Ingeborg wrote:
>> mike > wrote in :
>>
>>
>>>Win98SE
>>>I use Netscape 7 instead of IE.
>>>
>>>If I let the computer sit for a while, I come back to a dialup
>>>networking box asking for permission to dial the phone.
>>>How do I determine who is trying to dial the phone so I can put a stop
>>>to it? I have automatic updates turned off on everything I could find.
>>>
>>>I ran a process monitor then let it dial. Got some activity on
>>>MS_webcheckmonitor, but that's hardly conclusive.
>>>
>>>A related issue is that I sometimes get dialog boxes telling me that
>>>a program has stopped responding, but gives no clue as to which program.
>>>Hard to diagnose a problem with no info.
>>>Is there a way to figger that out too?
>>>
>>>Thanks, mike
>>
>>
>> Install a firewall (zonealarm free for instance
>> <http://www.oldversion.com/program.php?n=zalarm>) and let it dial. The
>> firewall will tell you which program tries to access the internet.
>
> Thanks,
> I have zonealarm installed. The firewall log shows only blocked
> accesses. There's nothing interesting in the program log. Maybe I just
> don't have it set up right??
>

When ZA doesn't give any popup's, there are two possibilities.
1) ZA is preconfigured to block/allow the particular program. Goto the
'Programs' tab, and change all permissions from 'allow' or 'block' to
'ask', and retry. Or suspect one of the blocked applications.
2) The program just fires dialup, and doesn't try to access the internet.
Is it trying to call your ISP's number? Maybe you've got some malware which
tries to connect to an expensive phonenumber?

> Nothing identifiable in the task monitor except the MS_webcheckmonitor
> mentioned above. But there is a LOT of stuff in there that I don't
> understand.
> mike

It's strange that MS_webcheckmonitor is active when you don't use IE. AFAIK
it's a part of IE, which keeps the offline pages up to date. When you kill
it, (Ctrl-Alt-Del -> Left button (can't remember the title. Close
program?)) does you problem disappear? Maybe you can disable it with
msconfig->tab startup.

[Brian K]

On 06/01/2005 7:29 AM mike performed amanuensis:

> Win98SE
> I use Netscape 7 instead of IE.
>
> If I let the computer sit for a while, I come back to a dialup
> networking box asking for permission to dial the phone.
> How do I determine who is trying to dial the phone so I can put a stop
> to it? I have automatic updates turned off on everything I could find.
>
> I ran a process monitor then let it dial. Got some activity on
> MS_webcheckmonitor, but that's hardly conclusive.
>
> A related issue is that I sometimes get dialog boxes telling me that
> a program has stopped responding, but gives no clue as to which program.
> Hard to diagnose a problem with no info.
> Is there a way to figger that out too?
>
> Thanks, mike

With dialup, if you leave your computer attached to your ISP. If the
connection is inactive for a period either your dialer of the ISP will
time you out and disconnect you. When that happens if you have the
dialer "set to dialup when there is no connection" then it's only doing
its job. (Re-establish the connection). If this is not desirable then
change it. Right click the IE Icon on your desktop. Select
Properties, then Connections. Modify the dialer option to "Never
Dial". Then the only time dial-up will occur is when you manually
click the ISP's dialup icon or select the number from Dialup Networking
and click "dial".

--
________
To email me, Edit "blog" from my email address.
Brian M. Kochera
"Some mistakes are too much fun to only make once!"
View My Web Page: http://home.earthlink.net/~brian1951

[mike]

Brian K wrote:
> On 06/01/2005 7:29 AM mike performed amanuensis:
>
>> Win98SE
>> I use Netscape 7 instead of IE.
>>
>> If I let the computer sit for a while, I come back to a dialup
>> networking box asking for permission to dial the phone.
>> How do I determine who is trying to dial the phone so I can put a stop
>> to it? I have automatic updates turned off on everything I could find.
>>
>> I ran a process monitor then let it dial. Got some activity on
>> MS_webcheckmonitor, but that's hardly conclusive.
>>
>> A related issue is that I sometimes get dialog boxes telling me that
>> a program has stopped responding, but gives no clue as to which program.
>> Hard to diagnose a problem with no info.
>> Is there a way to figger that out too?
>>
>> Thanks, mike
>
>
> With dialup, if you leave your computer attached to your ISP.

The computer is disconnecded from the ISP.

If the
> connection is inactive for a period either your dialer of the ISP will
> time you out and disconnect you. When that happens if you have the
> dialer "set to dialup when there is no connection"

Not set to dialulp when no connection.

then it's only doing
> its job. (Re-establish the connection). If this is not desirable then
> change it. Right click the IE Icon on your desktop. Select
> Properties, then Connections. Modify the dialer option to "Never
> Dial". Then the only time dial-up will occur is when you manually
> click the ISP's dialup icon or select the number from Dialup Networking
> and click "dial".
>



--
Return address is VALID but some sites block emails
with links. Delete this sig when replying.
..
Wanted, PCMCIA SCSI Card for HP m820 CDRW.
FS 500MHz Tek DSOscilloscope TDS540 Make Offer
Wanted 12" LCD for Compaq Armada 7770MT.
Bunch of stuff For Sale and Wanted at the link below.
MAKE THE OBVIOUS CHANGES TO THE LINK
ht<removethis>tp://www.geocities.com/SiliconValley/Monitor/4710/