repeated unsolicited connections to internet

I think I've tracked down what is doing the dialling, but don't know
what to do about it.
When the computer dials out, Zonealarm tells me that an outward
message has been blocked or a message has been routed. These messages
originate at different addresses which are all to do with servers
ending in pol.co.uk, which is Planet Online, which seems to be linked
to Hewlett Packard. The destination seems to be
resolver2.svr.pol.co.uk or, occasionally, hs2.zonelabs.com. About the
time the problem started, I installed an HP laser printer, but can't
guarantee that the timing was exact. Getting through to HP isn't easy
and Zonealarm seem bemused. Any ideas?

On Thu, 5 Aug 2004 12:08:16 -0500, "Ron Badour"
wrotg:

If you have two duplicate items, one marked and one unmarked, mark both of
them and reboot. One should disappear unless it is a required "duplicate"
like loadpower and AV settings. If there are unmarked entries you want rid
of:

There are seven run keys in the registry that are used to start programs:

1. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run

2. HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run

3. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RunOnce

4. HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\RunOnce

5. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\ RunServices

6. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\
RunServicesOnce

7. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\
RunOnce\Setup

If there is an item disabled in the Startup tab, MSconfig.exe, that was in
one of these keys, it will be in an identically named key except that there
will be a minus at the end, i.e., Run- I suppose any key could be
duplicated; however, I have only found keys #1, #2 and #5 duplicated in my
registry with a minus. If you want to get rid of a non-marked entry in
MSconfig, delete the key with the minus sign behind it.

When you disable an entry that is in the startup folder on the start menu, a
folder is created on the start menu called Disabled Startup Items. As
appropriate, delete the item from either the registry key or the Disabled
folder. If the item is the only thing in the registry key or Disabled
folder, you can delete the key or the folder also.

Items can start from the run= and load= lines in the win.ini file. If
disabled, they are placed in a norun= or noload= line. Go into the win.ini
file and change the appropriate line back to the way it was, i.e., change
norun=application name to run= and save the file.

Lots of programs have a dial home feature and will automatically check for
software updates. Look at the HP software and see if there is an automatic
update feature in its options.

--
Regards

Ron Badour, MS MVP for W98
Tips: http://home.satx.rr.com/badour
Knowledge Base Info:
http://support.microsoft.com/default.aspx?pr=kbinfo

"Tom Barkas" wrote in message
...
I think I've tracked down what is doing the dialling, but don't know
what to do about it.
When the computer dials out, Zonealarm tells me that an outward
message has been blocked or a message has been routed. These messages
originate at different addresses which are all to do with servers
ending in pol.co.uk, which is Planet Online, which seems to be linked
to Hewlett Packard. The destination seems to be
resolver2.svr.pol.co.uk or, occasionally, hs2.zonelabs.com. About the
time the problem started, I installed an HP laser printer, but can't
guarantee that the timing was exact. Getting through to HP isn't easy
and Zonealarm seem bemused. Any ideas?

On Thu, 5 Aug 2004 12:08:16 -0500, "Ron Badour"
wrotg:

If you have two duplicate items, one marked and one unmarked, mark both
of
them and reboot. One should disappear unless it is a required
"duplicate"
like loadpower and AV settings. If there are unmarked entries you want
rid
of:

There are seven run keys in the registry that are used to start programs:

1. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run

2. HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run

3. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RunOnce

4. HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\RunOnce

5. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\
RunServices

6. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\
RunServicesOnce

7. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\
RunOnce\Setup

If there is an item disabled in the Startup tab, MSconfig.exe, that was
in
one of these keys, it will be in an identically named key except that
there
will be a minus at the end, i.e., Run- I suppose any key could be
duplicated; however, I have only found keys #1, #2 and #5 duplicated in
my
registry with a minus. If you want to get rid of a non-marked entry in
MSconfig, delete the key with the minus sign behind it.

When you disable an entry that is in the startup folder on the start
menu, a
folder is created on the start menu called Disabled Startup Items. As
appropriate, delete the item from either the registry key or the Disabled
folder. If the item is the only thing in the registry key or Disabled
folder, you can delete the key or the folder also.

Items can start from the run= and load= lines in the win.ini file. If
disabled, they are placed in a norun= or noload= line. Go into the
win.ini
file and change the appropriate line back to the way it was, i.e., change
norun=application name to run= and save the file.

On Sun, 15 Aug 2004 09:52:42 +0100, Tom Barkas
scribbled some thoughts:

I think I've tracked down what is doing the dialling, but don't know
what to do about it.
When the computer dials out, Zonealarm tells me that an outward
message has been blocked or a message has been routed. These messages
originate at different addresses which are all to do with servers
ending in pol.co.uk, which is Planet Online, which seems to be linked
to Hewlett Packard. The destination seems to be
resolver2.svr.pol.co.uk or, occasionally, hs2.zonelabs.com. About the
time the problem started, I installed an HP laser printer, but can't
guarantee that the timing was exact. Getting through to HP isn't easy
and Zonealarm seem bemused. Any ideas?



Your machine won't dial out if:

1) You unplug phone line when not online
2) You uncheck the dial automatically in Internet Options

With the installation of some software, there is sometimes
in the agreement the proviso for third party distributed
computing. Juno did that. Personally, the only distributed
comp I would trust is the SETI and possibly the Google one:
http://toolbar.google.com/dc/offerdc.html


ZoneAlarm from my experience seems to be a resource hog,
which is why I went to SPF (Sygate Personal Firewall)
www.sygate.com

--
Sincerely, | (©) (©)
| ------ooo--(_)--ooo------
Andrew H. Carter | /// \\\
d(-_-)b |

On Sun, 15 Aug 2004 08:11:45 -0500, "Ron Badour" wrote:

Lots of programs have a dial home feature and will automatically check for
software updates. Look at the HP software and see if there is an automatic
update feature in its options.

I don't think that is the problem.

The program that is trying to dial out is the "Dial-up networking" tghat comes
with MS Windows 98.

It just opens a connection to yopu ISP, and then just sits there with an open
line, increasing your phone bill for no purpose whatoever.


--
Steve Hayes from Tshwane, South Africa
http://www.geocities.com/Athens/7734/stevesig.htm
E-mail - see web page, or parse: shayes at dunelm full stop org full stop uk

On Sun, 15 Aug 2004 16:22:15 -0400, Andrew H. Carter
wrote:

Your machine won't dial out if:

1) You unplug phone line when not online
2) You uncheck the dial automatically in Internet Options

Yes, you can do that, and I have.

What is doesn't stop is that pesky "Dial up networking" window poppoing up,
and sending everything you are typing to the bit bucket, except that igf you
happen to hit a "c", as I did when I typed "except" just now, it will
immediately start to dial.

The trouble is that the "Dial-up networking" thing behaves like a popup ad.

If there is any way of stopping it from doing that, I would love to know howe
to do it. Other programs don't keep popping up asking if you want to start
them.

--
Steve Hayes from Tshwane, South Africa
http://www.geocities.com/Athens/7734/stevesig.htm
E-mail - see web page, or parse: shayes at dunelm full stop org full stop uk

On Mon, 16 Aug 2004 03:52:09 GMT,
(Steve Hayes) scribbled some thoughts:

On Sun, 15 Aug 2004 16:22:15 -0400, Andrew H. Carter
wrote:

Your machine won't dial out if:

1) You unplug phone line when not online
2) You uncheck the dial automatically in Internet Options

Yes, you can do that, and I have.

What is doesn't stop is that pesky "Dial up networking" window poppoing up,
and sending everything you are typing to the bit bucket, except that igf you
happen to hit a "c", as I did when I typed "except" just now, it will
immediately start to dial.

The trouble is that the "Dial-up networking" thing behaves like a popup ad.

If there is any way of stopping it from doing that, I would love to know howe
to do it. Other programs don't keep popping up asking if you want to start
them.

I wwould check everysingle installed program to check if you
can disable the "Call home to the mothership" feature, I
would also check to see what proggies startup at boot. ZA
did that quite alot, which is why I trashed it. I am the
master of my comp, with regards to when I connect.

--
Sincerely, | (©) (©)
| ------ooo--(_)--ooo------
Andrew H. Carter | /// \\\
d(-_-)b |

Of course it would use dial up networking--how else could the program make a
call?

--
Regards

Ron Badour, MS MVP for W98
Tips: http://home.satx.rr.com/badour
Knowledge Base Info:
http://support.microsoft.com/default.aspx?pr=kbinfo

"Steve Hayes" wrote in message
...
On Sun, 15 Aug 2004 08:11:45 -0500, "Ron Badour"
wrote:

Lots of programs have a dial home feature and will automatically check
for
software updates. Look at the HP software and see if there is an
automatic
update feature in its options.

I don't think that is the problem.

The program that is trying to dial out is the "Dial-up networking" tghat
comes
with MS Windows 98.

It just opens a connection to yopu ISP, and then just sits there with an
open
line, increasing your phone bill for no purpose whatoever.


--
Steve Hayes from Tshwane, South Africa
http://www.geocities.com/Athens/7734/stevesig.htm
E-mail - see web page, or parse: shayes at dunelm full stop org full stop
uk

Ron,

Can you help with this (probably unrelated) item? In the startup
programs, I have a ticked box with no description of any sort. If I
delete it, it comes back. Any ideas?

Tm

On Thu, 5 Aug 2004 12:08:16 -0500, "Ron Badour"
wrotg:

If you have two duplicate items, one marked and one unmarked, mark both of
them and reboot. One should disappear unless it is a required "duplicate"
like loadpower and AV settings. If there are unmarked entries you want rid
of:

There are seven run keys in the registry that are used to start programs:

1. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run

2. HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run

3. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RunOnce

4. HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\RunOnce

5. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\ RunServices

6. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\
RunServicesOnce

7. HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\
RunOnce\Setup

If there is an item disabled in the Startup tab, MSconfig.exe, that was in
one of these keys, it will be in an identically named key except that there
will be a minus at the end, i.e., Run- I suppose any key could be
duplicated; however, I have only found keys #1, #2 and #5 duplicated in my
registry with a minus. If you want to get rid of a non-marked entry in
MSconfig, delete the key with the minus sign behind it.

When you disable an entry that is in the startup folder on the start menu, a
folder is created on the start menu called Disabled Startup Items. As
appropriate, delete the item from either the registry key or the Disabled
folder. If the item is the only thing in the registry key or Disabled
folder, you can delete the key or the folder also.

Items can start from the run= and load= lines in the win.ini file. If
disabled, they are placed in a norun= or noload= line. Go into the win.ini
file and change the appropriate line back to the way it was, i.e., change
norun=application name to run= and save the file.

On Mon, 16 Aug 2004 17:24:20 +0100, Tom Barkas
scribbled some thoughts:

Ron,

Can you help with this (probably unrelated) item? In the startup
programs, I have a ticked box with no description of any sort. If I
delete it, it comes back. Any ideas?

Tm



Is there at least a file name? What you are experiencing
can probably be corrected if you look for the entry in your
Registry.

--
Sincerely, | (©) (©)
| ------ooo--(_)--ooo------
Andrew H. Carter | /// \\\
d(-_-)b |

On Mon, 16 Aug 2004 00:28:45 -0400, Andrew H. Carter
wrote:

On Mon, 16 Aug 2004 03:52:09 GMT,
(Steve Hayes) scribbled some thoughts:

On Sun, 15 Aug 2004 16:22:15 -0400, Andrew H. Carter
wrote:

Your machine won't dial out if:

1) You unplug phone line when not online
2) You uncheck the dial automatically in Internet Options

Yes, you can do that, and I have.

What is doesn't stop is that pesky "Dial up networking" window poppoing up,
and sending everything you are typing to the bit bucket, except that igf you
happen to hit a "c", as I did when I typed "except" just now, it will
immediately start to dial.

The trouble is that the "Dial-up networking" thing behaves like a popup ad.

If there is any way of stopping it from doing that, I would love to know howe
to do it. Other programs don't keep popping up asking if you want to start
them.

I wwould check everysingle installed program to check if you
can disable the "Call home to the mothership" feature, I
would also check to see what proggies startup at boot. ZA
did that quite alot, which is why I trashed it. I am the
master of my comp, with regards to when I connect.

You might do that, but I'm not going to waste any more time on it. There are
better things to spend time on than looking for something that isn't there.

I know what program is trying to conned: Duialup networking, part of MS
Windows.

There is no need to look any further. The question is not which program is
trying to connmect, but to stop it.


--
Steve Hayes from Tshwane, South Africa
http://www.geocities.com/Athens/7734/stevesig.htm
E-mail - see web page, or parse: shayes at dunelm full stop org full stop uk