A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Security and Administration with Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Thousands of internet sessions from an XP Pro machine



 
 
Thread Tools Display Modes
  #1  
Old April 12th 10, 03:26 PM posted to microsoft.public.windowsxp.security_admin
zaz
external usenet poster
 
Posts: 1
Default Thousands of internet sessions from an XP Pro machine

A client of ours has one XP workstation that is attempting to open thousands
of internet sessions. This has the affect of flooding the network with
unnessary traffic. This was causing the old Netgear router to crash and we
have replaced it with a more sophisticated Draytek which has identified this
XP machine as the source of the network traffic. We have put a restriction
on their router to prevent this machine from opening up too many connections,
which helps the other users on their network, but this machine needs to be
stopped from doing this.

I have used the usual suspects (Process Explorer, Auto Runs, AVG,
MalwareBytes), but am unable to find the culprit on the machine that is
causing the problem. Can anyone suggest other utilities, procedures to go
through that might help. Other than rebuilding the machine?

Ads
  #2  
Old April 12th 10, 04:25 PM posted to microsoft.public.windowsxp.security_admin
Leonard Grey[_3_]
external usenet poster
 
Posts: 3,048
Default Thousands of internet sessions from an XP Pro machine

If you're not able to discover and remove the malware - and it ain't
easy, these days - you'll have to re-build the workstation.

If it was my shop, and a client was opening thousands of connections, I
would take the machine offline (from the internet and the network)
immediately.
---
Leonard Grey
Errare humanum est

zaz wrote:
A client of ours has one XP workstation that is attempting to open thousands
of internet sessions. This has the affect of flooding the network with
unnessary traffic. This was causing the old Netgear router to crash and we
have replaced it with a more sophisticated Draytek which has identified this
XP machine as the source of the network traffic. We have put a restriction
on their router to prevent this machine from opening up too many connections,
which helps the other users on their network, but this machine needs to be
stopped from doing this.

I have used the usual suspects (Process Explorer, Auto Runs, AVG,
MalwareBytes), but am unable to find the culprit on the machine that is
causing the problem. Can anyone suggest other utilities, procedures to go
through that might help. Other than rebuilding the machine?

  #3  
Old April 12th 10, 05:17 PM posted to microsoft.public.windowsxp.security_admin
FromTheRafters[_3_]
external usenet poster
 
Posts: 102
Default Thousands of internet sessions from an XP Pro machine

"zaz" wrote in message
...

A client of ours has one XP workstation that is attempting to open
thousands
of internet sessions. This has the affect of flooding the network
with
unnessary traffic. This was causing the old Netgear router to crash
and we
have replaced it with a more sophisticated Draytek which has
identified this
XP machine as the source of the network traffic. We have put a
restriction
on their router to prevent this machine from opening up too many
connections,
which helps the other users on their network, but this machine needs
to be
stopped from doing this.

I have used the usual suspects (Process Explorer, Auto Runs, AVG,
MalwareBytes), but am unable to find the culprit on the machine that
is
causing the problem. Can anyone suggest other utilities, procedures
to go
through that might help.


Physically unplug it from the network!

Other than rebuilding the machine?


Rebuilding *shouldn't* be that difficult.



  #4  
Old April 13th 10, 08:57 PM posted to microsoft.public.windowsxp.security_admin
Twayne[_3_]
external usenet poster
 
Posts: 1,073
Default Thousands of internet sessions from an XP Pro machine

In ,
zaz typed:
A client of ours has one XP workstation that is attempting
to open thousands of internet sessions. This has the
affect of flooding the network with unnessary traffic.
This was causing the old Netgear router to crash and we
have replaced it with a more sophisticated Draytek which
has identified this XP machine as the source of the network
traffic. We have put a restriction on their router to
prevent this machine from opening up too many connections,
which helps the other users on their network, but this
machine needs to be stopped from doing this.

I have used the usual suspects (Process Explorer, Auto
Runs, AVG, MalwareBytes), but am unable to find the culprit
on the machine that is causing the problem. Can anyone
suggest other utilities, procedures to go through that
might help. Other than rebuilding the machine?


Once you have that machine rebuilt, which is probably your
only option, you should make backup startegies a priority
issue. If that client had a backup in place he could spend
probably a half hour instead of 2+ days to get it all back in
place. And there WILL BE a next time a backup will be needed,
regardless of attitudes and opinions.

HTH,

Twayne`


 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 10:56 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2023, Jelsoft Enterprises Ltd.
Copyright 2004-2023 PCbanter.
The comments are property of their posters.