track down what's calling rasautou

Is there any way to track down what is calling rasautou.exe ?

By system is auto dialling my ISP when nothing is happening on the system - no messenger, no outlook, no IE, netscape, etc. No seti, no ntp client.

This is driving me mad - I can see rasautou.exe kicking in when the dialup starts, but I cannot find out what is calling it.

Any help would be appreciated.

 

Hi sdit
Welcome to the boards. Does this help at all?

Daizy

 

Steve,

Yes, that's exactly what it's doing. I've tried to find the culprit, but can only see rasautou been called.

Daisy,

Thanks, this looks really interesting - I'll give some of it a try and see what happens.

Thanks.

 

Hi Sdit

Welcome to the BEST, the WidowsBBS!

Steve is correct about a Trojan or worm so here is the place to go for an online scan:

http://www.anti-trojan.net/at.asp?l=en&t=onlinecheck

But actually it is more likely that it is Spy/Adware so get install and run the below to clear these:

Spyware and adware removal

http://security.kolla.de/index.php?lang=en&page=download

http://www.lavasoftusa.com/downloads.html

http://www.definitivesolutions.com/bhodemon.htm

The order on these is important. Always run SpyBot first then Adaware.

Let us know if you have any BHO except Acrobat.

Report back.

Mike