Computer tries to access internet on its own

[rrcn]

Hey everyone,

I have noticed that in the middle of the night, my computer tries to sign on to AOL. It can't sign on because it needs a password and no password is saved.

I decided to leave my password saved to see what happens when it connects. The only thing I saw is it connect to aol.

This morning I checked the event viewer and found this:

Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 2/6/2004
Time: 1:20:46 AM
User: NT AUTHORITY\SYSTEM
Computer: HAIDER
Description:
The ATWPKT2 service was successfully sent a start control.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Then came:

Event Type: Information
Event Source: RemoteAccess
Event Category: None
Event ID: 20158
Date: 2/6/2004
Time: 1:21:27 AM
User: N/A
Computer: HAIDER
Description:
The user User Name successfully established a connection to The Internet (1) using the device IRDA10-1.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Then this:

Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 2/6/2004
Time: 9:56:53 AM
User: NT AUTHORITY\SYSTEM
Computer: HAIDER
Description:
The Speed Disk service service was successfully sent a start control.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

And lastly:

Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
Date: 2/6/2004
Time: 9:58:10 AM
User: N/A
Computer: HAIDER
Description:
The Speed Disk service service entered the stopped state.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


I do not know why Remote Access was enabled and what speed disk has to do with it.

Sorry about the long message.

Any and all information is greatly appreciated.

[Bill in SD, CA]

Weird.

Have you scanned for spyware and viruses?

Bill

curious are you running any third party firewall software?

if not i highly suggest you do

[rrcn]

I have scanned for spyware with updated definitions of adaware and spybot. Mainly it finds tracking cookies. I am running PC-cillin personal firewall. I'm not sure how reliable it is, but I do every so often mainly get a ping attack and a few other types of attacks. The security setting is on high. What do you think?

[vass0922]

Your machine is trying to connect to AOL because thats your default connection to the internet.

So ANY application that tries to access the internet will prompt you for a connection if its not available.
SO If a virus was on your box it wouldn't be able to connect without your password.

As GZ suggested, GET a firewall
Sygate Personal Firewall is an excellent choice.

-- edit --
Ok but be aware of what YOU are allowing to access the network
Chances are if you just clicked "YES ALLOW" on anything that popped up ... you're already allowing it access outside.

Or it could be using your email client, which you're more likely to allow to access all the time.

[sam]

try opening internet explorer/tools/internet options/connections/ then select never dial a connection

[Starfury_2260]

could be a keylogger or something that gathers info trying to send it home. i'd suggest using something that searches for system monitoring programs, like personal antispy.

[rrcn]

@sam: I always have "never dial a connection" selected.

@starfury: I'm downloading personal antispy now and I'll see what will happen.