wtf is raslog?

[Scraggles]

I'm working on cleaning up a computer, and I cannot open the task manager, so I managed to get it open by making a copy of it, and renaming it to taskmgr.com and then opening it. Then I found out why the laptop was going so slow... A process called 'Raslog.exe' is running and using roughly 150mb of ram, and 50% of the CPU at all times. So I shut it down and whaddaya know! It creeps back up the list and is at the number 1 memory eating spot withing 10 seconds! I do have the internet disconnected from that laptop, and I am running a virus scan. Anyone have any idea what the hell this is? I did google for it, and when I type in 'raslog.exe' only two foreign pages show for me. When I type just 'raslog' it gives me a crapload of legitimate stuff and nothing about this mother ****er. Any ideas at all?

[Si Veteran]

Well, RAS is remote access service, does the machine have anything related to that installed? Also have you run a scan with Ad-Aware - the fact that task manager was being closed makes me think something is running that shouldn't be.

[Scraggles]

I've run Adaware pro, and spybot. They didn't pick anything too unusual up.

[Frank]

I have no idea what this program is but it sounds like a virus or maybe spyware.

Also go to http://housecall.antivirus.com and run a scan EVEN IF you have a virus scan program installed.

Do you have the most recent updates and program files for Spybot and Adaware? I have seen it not find anything even with a pattern file update, so I uninstall and install the new version and it finds something that it didn't find before.

[Scraggles]

  Frank said:

I have no idea what this program is but it sounds like a virus or maybe spyware.

Also go to http://housecall.antivirus.com and run a scan EVEN IF you have a virus scan program installed.

Do you have the most recent updates and program files for Spybot and Adaware?  I have seen it not find anything even with a pattern file update, so I uninstall and install the new version and it finds something that it didn't find before.

585100073[/snapback]

I do have the most recent updates for spybot and adaware. The computer didn't have either of them installed so I installed them this morning. As for the virus scanner, I haven'tt tried housecall yet because as far as I can tell the raslog has something to do with remote access logging. They can't touch it if I'm not on the net with it. Running a few other scanners on the pc before I connect it to the net.

[<-_->djqball<-_->]

Couple of Questions--->

What is you internet connection type?-

If its DSL you may have a type of RAS POET installed-

What OS are you running?

System restore?

[e4ymod]

raslog.exe is an internet dialer. One of my ex-employees got it at work for surfing porn. now he is my EX-employee.

[b0m8er]

  e4ymod said:

raslog.exe is an internet dialer.  One of my ex-employees got it at work for surfing porn.  now he is my EX-employee.

585100241[/snapback]

Haha :devil: :laugh: (Y)

[Scraggles]

  <-_->djqball<-_-> said:

Couple of Questions--->

What is you internet connection type?-

If its DSL you may have a type of RAS POET installed-

What OS are you running?

System restore?

585100179[/snapback]

1. Cable

2. Windows XP

3. No system restore points are available

  e4ymod said:

raslog.exe is an internet dialer.  One of my ex-employees got it at work for surfing porn.  now he is my EX-employee.

585100241[/snapback]

The thing is this is the bosses daughters computer. So if that's the case, I'll know she's a naughty little girl and I'll have to hit it.

The thing is, the internet isn't even connected and it's still taking up 130mb of memory and 50% of the CPU. I'm still running a virus scan too, since it's killing the resources It'll be god knows how long until I have any answers from this POS.

[Si Veteran]

You could reboot into safe mode and rename the raslog.exe to something else. That way it won't run next time you boot, and if it turns out to be something important you can always rename it back again (Y)

[Hankyone]

also check the startup programs

[Scraggles]

Just found out I can't run msconfig either. No viruses found. Regedit also doesn't work.

[Neoforcer]

Check to see if you have a program installed called raslogger in add remove programs here is what it does.

RasLog (Remote Access Service Logging) is a tool that logs

internet dialup connections. With it, you can:

- start a dialup connection to the internet, using

quick access via a taskbar tray icon,

- create overviews of dialup connections since a certain

date and calculate the connection costs,

- play alert sounds on (dis)connect events.

- view statistics via a taskbar tray icon,

[Scraggles]

  Neoforcer said:

Check to see if you have a program installed called raslogger in add remove programs here is what it does. 

RasLog (Remote Access Service Logging) is a tool that logs

internet dialup connections. With it, you can:

- start a dialup connection to the internet, using

  quick access via a taskbar tray icon,

- create overviews of dialup connections since a certain

  date and calculate the connection costs,

- play alert sounds on (dis)connect events.

- view statistics via a taskbar tray icon,

585100932[/snapback]

Nope. It's not installed. Nothing with 'raslog' is installed at all.

[Si Veteran]

  Scraggles said:

Just found out I can't run msconfig either. No viruses found. Regedit also doesn't work.

585100848[/snapback]

You have something running in the background which is closing them as soon as they open - it's either a virus or some spyware (same thing imo), so start in safe mode where they won't be loaded at startup. That way you can get into msconfig to disable them. Then try another virus/spyware scan and see what crops up (Y)

[Scraggles]

  Neoforcer said:

Check to see if you have a program installed called raslogger in add remove programs here is what it does. 

RasLog (Remote Access Service Logging) is a tool that logs

internet dialup connections. With it, you can:

- start a dialup connection to the internet, using

  quick access via a taskbar tray icon,

- create overviews of dialup connections since a certain

  date and calculate the connection costs,

- play alert sounds on (dis)connect events.

- view statistics via a taskbar tray icon,

585100932[/snapback]

Nope. It's not installed. Nothing with 'raslog' is installed at all.

[FiB3R]

  Scraggles said:

The thing is this is the bosses daughters computer. So if that's the case, I'll know she's a naughty little girl and I'll have to hit it.

585100352[/snapback]

LOL Whats her email address? I like to hit it too ;)

[Frank]

If you have Spybot, you can also check the startup by going into the advanced mode, Tools, and Startup Options.

Can you post a screen shot of the processes running?

[Hankyone]

  Scraggles said:

Just found out I can't run msconfig either. No viruses found. Regedit also doesn't work.

585100848[/snapback]

have u tried in safemode?

[Caledai]

how about hijack this. load the log here, or post the log to this website for analysis. http://www.hijackthis.de/index.php

the sites not 100% reliable but it gives a great indication.