whats up with my connection?

[Hungrycookpot]

I just built a new AMD system im running windows xp pro, and dial-up internet (i know i suck but i cant get anything else). Whenever i turn on my computer, i get 2 error messages saying something about it cant find the file ramsys.exe. (i dont know if that connects to my problem but they started about the same time). After the error messages and before all my software has even loaded my computer begins trying to connect to the internet? thats all fine and good, except i dont yet have a 2nd dedicated phone line, so i cant get any calls! if i tell the connection to cancel, it does, but then it just trys again. Last night i left my computer sitting and it connected and i missed an important call from my girlfriend! If anyone knows whats going on here or knows how to solve this problem it would be greatly appreciated.

[Martoch]

First off, welcome to TechIMO!!!


Ok, a quick search for ramsys.exe finds this:
http://www.sophos.com/virusinfo/anal...obliviond.html

Description
Troj/Oblivion-D is a backdoor Trojan.

Troj/Oblivion-D will create a copy of itself in the Windows folder with the filename ramsys.exe and an entry will be added to the run parameter of the win.ini file so that the Trojan is run when Windows is started up.

Recovery
Please read the instructions for removing Trojans.
At the taskbar, click Start|Run. Search for Win.ini in the Windows folder and open it in Notepad. In the 'run' section, search for any reference to ramsys.exe. Delete the reference.

Reboot your computer.

Here's Symantec's response:
http://www.symantec.com/avcenter/ven...an.sheehy.html

FREE online antivirus scan:
http://housecall.trendmicro.com/

As far as your internet connection preventing calls from coming in...2 suggestions:

1) Leave your phone line unplugged from your computer until you are ready to use it.
2) Leave your computer running 24/7, that way it won't try to connect every time you boot it up and make your girlfriend wonder who you're talking to!


Mike

[Brainchild]

Also AVG Anti Virus is a great free antivirus.Personally I like it better than Norton.

and AdAware would be a good idea too.

Welcome to TechIMO

[Zezba]

Since your useing Windows XP the Win.ini file is not realy used any more.

So go to the Start menu/search tab and search for the Msconfig.exe file. Open it and thare will be 6 tabs(General-SYSTEM.INI-WIN.INI-BOOT.INI-Services-Startup), go to tab "Startup". Thare will be a list of files including the ramsys.exe file, check if off then press OK, and restart your computer.

PS: You mite want to reinstall you system software, it would probly fix the internet problem.

PS 2: Make sure you dount have GAIN or Gator on your computer it downloads advertisments and stuff on your computer with out you knowing.

[Beemer]

Welcome to techimo Zezba.
An easier way to get into the System Configuration Utility is Start, Run, type msconfig.

His connection wow's are directly related to the trojan that Martoch researched out.

The trojan needs an Internet connection at all times in this case. This is why his dialup starts automatically. Once he removes the trojan per the instructions he should be good to go. Trojan gone, no more auto dial.

You have to be careful with disabling spyware and trojan's from the System Configuration Utility Startup tab because it may kill Internet access. wayenhance was just such a spyware application.

The best way to handle this malware type of applications is to let the anti-virus and anti-spyware programs handle the safe removal.

Cheers!

[Starfury_2260]

oh and for missing calls i'd say get callwave. It's an internet answering machine which can take messages while you are online and let you download and listen to them (without getting offline). There is a monthly fee, but it's only like $3 and it's worth it. I think you get caller id with that too (though it may be part of a premium service).