The other night I was in the other room and I heard my computer dialing up and I hadn't started anything! I ran to look and it was my Norton AV dialing up. My Zone Alarm said "Norton AV is trying to act like a server". I told it I didn't want it to do that any more.

Today I was driving home and was trying to phone the wife that was finally on my way home. The line was busy all the way home. When I got home and inquired she said she wasn't on the phone. I picked up the phone and got a dial tone. I checked my Zone Alarm log and it shows that it blocked incoming and outgoing hits at about the same times I was trying to call. I've seen this before but my machine didn't have to be logged on for this to happen.

My question is: is there anywhere I can look in my system to determine if it was on-line at some point and if so what application made the call? This stuff is very disturbing.

I ran Spybot and it found nothing so I think I'm clear of spyware.

TIA

You probably just need to turn off the "auto-update" feature of Norton. ZoneAlarm will only block it's attempts to access the Internet, but it won't prevent it from dialing out to establish the Internet connection.

maybe turn on auditing for privilege use etc. If you have win2k or xp. This in done in the local security policy. That way it will say who(account did what and when). Also there might be stuff in the norton logs and or event logs. The auditing will show up in the security logs of event viewer.