Some HELP please....

[Zenbaas]

So I decided to install bitmeter as my bandwidth has been moving a little too fast for my liking....now after looking at the last few hours usage stats I noticed this:

Time Download Upload Total

since03:00 PM Today 10.22 MB 134.49 MB 144.71 MB 2.91 kB/sec 38.25 kB/sec
02:00 PM-03:00 PM Today 13.26 MB 172.07 MB 185.33 MB 3.77 kB/sec 48.94 kB/sec
11:00 AM-12:00 PM Today 1.53 MB 1.53 MB 3.05 MB 444 bytes/sec 444 bytes/sec
10:00 AM-11:00 AM Today 13.57 MB 120.85 MB 134.43 MB 3.86 kB/sec 34.38 kB/sec
09:00 AM-10:00 AM Today 13.89 MB 203.85 MB 217.74 MB 3.95 kB/sec 57.98 kB/sec
08:00 AM-09:00 AM Today 15.35 MB 222.93 MB 238.28 MB 4.37 kB/sec 63.41 kB/sec

Now this is when the computer is idle.....when I go onto it the uploading suddenly stops...? Any ideas to find out what the hell is going on or how can I stop it form doing this....?

 

[gregmcc]

install wireshark and run it for 10 mins. It will tell you whats happening on the network.

 

[Quasimodo]

Are you using Windows? If so, do you have automatic updates switched on? It could be that Windows is downloading some updates which it does when the machine is idle.

Or you have been infected

Wireshark will tell you what IP addresses are being visited - it will give you a clue at to what might be going on.

 

[Zenbaas]

install wireshark and run it for 10 mins. It will tell you whats happening on the network.

Thanks will try that.

Are you using Windows? If so, do you have automatic updates switched on? It could be that Windows is downloading some updates which it does when the machine is idle.

Or you have been infected

Wireshark will tell you what IP addresses are being visited - it will give you a clue at to what might be going on.

Its the uploading which is bothering me. All automatic updates are disabled including adobe updater.


Ok so I unplugged my phone line for interest sake and there was still uploading "happening". Now my and my SO's computer are linked in a network setup.....could this be what bitmeter is picking up....?

 

[kilos]

Its called a virus/work/trojan . back door app or virus software update

Use the SysInternals app called tcpview or netstat @cmd prompt to see what connections are established to remote IP

 

[Zenbaas]

Thanks guys...figured it out Nothing serious.....

 

[cyberarmy]

Thanks guys...figured it out Nothing serious.....

But we want to know.