My computer (Dimension xps b_r with Windows 2K Pro) has recently started booting by itself. I changed the network card from the 3COM it came with after it stopped working with a Realtek. Since then, the computer mysteriously boots by itself.
I checked the driver to see if perhaps the "Wakeup on Lan" option was set, but it wasn't.
I did all that and what I can't understand is how could this be possible when the computer is OFF? I did however got my Internet Explorer Hijacked and since cleaned it all up and the problem started sometime before the Hijacked Browser.
I got all the updates from Microsoft for Windows 2K Pro and the computer is working normally when I am on it. I checked all the services and they are all good processes.
I have a feeling that there is a CMOS setting in combination with the network hardware that is allowing someone to wake my computer on. I just haven't stumble into it yet. I just need someone to point me in the right direction. I also think that it might be an exploit targeting DELL systems that have this ability to wake up on lan, but I could not be sure of that!
If I do have a virus, it is one that cannot be detected by the current virus protection and detection software.
For now, I just have the power swith OFF until I need to use the computer.
Okay - sounds like you have good prevention in place....so lets look at the Event log to see if this indicates why it decides to reboot.
Look in both the Services -> Event log ............. both the.System & Application Event Logs - cut/paste the last couple of messages in there to see if there is a pattern/cause
I will look at the event log as soon as I get home tonight and update the thread, however will the event log register a "wake up on lan" trigger?
What would be the correct terminology for this "Wake up on Lan" (if this is what it is)? and a friend suggested that the culprit could be a faulty power supply? Could that be possible?
I am sorry to post all these questions, but I figure I post it anyhow to maybe help in finding the cause.
Sorry I went offline for so long. I just needed the time to really investigate this problem and I finally got to the bottom of it.
As it turns out, a lot of the Dell machines out of the factory have something called "Wake on Lan" BIOS option set "ON". What this means is, that if someone has your MAC and IP address they can send you something called a "Magic Packet" which will turn your machine on.
It's really not that difficult to manufacture a "Magic Packet" which will turn machines on. I tried it and it turn my computer on from a remote computer.
I disabled the BIOS option and removed any Registry settings that allowed this feature and it still let it happen. I also read somewhere that my computer might have shipped with this option turn on via hardware jumper. However, I cannot find much information to support the rumor.
Anyhow, I am again sorry that I have not updated this thread for a while. If anyone has any comments, let me know.
sentinel-master
345 Posts
612
0
Posted July 14th, 2004 13:00
Have you made sure your're protected from the Blaster worm - and kept up to date with latest Windows security patches ?
http://www.microsoft.com/security/incident/blast.mspx
(1) Keep all OS and Office apps up to date via Windows Update
(2) Run a Virus s/w protection tool regularly
(3) Run a spybot or Adaware program regulary