please help with general internet access security question

[t41user]

For several years, up until the other day, I could remain connected to the internet and remain in control of when/why my computer seemed to be accessing/interacting with the internet - in the past my computer only accessed/interacted with the internet when I was explicitly sending/receiving information, and or knowlingly running a program that sends/receives information. However, for the past few days, my computer is constantly sending/receiving information - seemingly beyond my control and without any good reason. I have shutdown every nonessential program/process, and when connected to the internet, information continues to send/receive. I have tried running a firewall with maximum security settings, and am told that a remote system is attempting to access my computer (with more than one inbound protocols at different times). However, the local address for this remote system is my own IP address. Could someone please help me understand what's going on?

[Kyocera]

Have you scanned for virus and spyware? Do this not connected to the internet, disable the connection or unplug your cable. If you feel like your AV software is not working properly download the Kaspersky on line scan if you are able to. Adaware is a good spyware scanner as is spybot search and destroy, microsoft spyware beta, etc.

[t41user]

i have run repeated scans with adaware and norton av 2006. i have also installed norton internet security 2006. i know many people don't like it, but i've had no trouble with it in the past. these programs find no viruses or spyware on my computer. but my computer is constantly accessing the internet when it appears that it should not be. all kinds of programs on my computer seems to be accessing the internet. what could be going on? please help.

[Kyocera]

If you have recently installed Norton Internet Sec and are getting pop ups saying something like "so and so program is attempting to access the internet" and is asking to allow or block, that is actually normal, and that is why I don't like that program. After a while when you decide what you want those programs to do by allowing or blocking the pop ups will cease.
Configuring your security settings can also help.

[t41user]

i appreciate your (and anyone else's) patience. please indulge me one more time. the problem appears not just to be the annoyance of norton learning which programs i want to allow to access the internet. the problem appears to be that all sorts of programs are now trying to access the internet that never (or never in recent memory) have accessed the internet in the past. for instance, msmsgs. i have never used the program. to my knowledge, it has never tried to access the internet before. but now, it (along with other programs) appear to be accessing the internet constantly. could i be misunderstanding what is going on?

[Kyocera]

I'd turn off MS messenger in the start menu (msconfig) and any other programs that don't need to be running unless needed. You might try using the symantec support web site, manufacturers web sites are specifically for troubleshooting also. I bought a new wireless router a while back and it came with a free copy of Norton Intenet Security, Since I already had System Works installed I figured what the heck I'll throw this in too. Well after installing it and watching my computer go crazy, I went insane and about 45 minutes later I uninstalled and did a system restore. All was quiet again. Wish I could help more.

[mrdeucie]

I believe with Windows Messenger you also need to disable it from starting up from the program itself. You need to go into the following:

Tools -> Options -> Preferences

Now you need to uncheck the "Run Windows Messenger when Windows starts" checkbox.

[yossarian]

If you're feeling brave enough, you might want to backup all you user data and reinstall the machine, locking down all security settings.

Make sure that your OS installation is patched to the latest updates, cookie policy is set right, and that you haven't got any trojan infections.

Also keylogging programs are something that you cannot discount. They slip through most antivirus programs, and if it is indeed a keylogger, it is a dangerous compromise of your computer's security.

If you are astute and have an understanding of the internet protocol, then I suggest you use tcpdump for windows http://www.winpcap.org/windump/ to monitor your own internet traffic and determine what exactly is being sent and received.