Step by Step to investigating Bandwidth loss not theft

[remybfg10k]

Hi Guys,

Been looking around for this information/sticky but cant seem to find it!

Anyway, can we list a step by step guide to investigating your PC for things that would eat your cap unknowingly (i.e. Windows Update, Adobe Update and also malicious software etc)

As i have a bit of a problem:

My mom's PC has been connected to the net for 5 days and she's used her 3 gig cap up:

http://mybroadband.co.za/photos/showphoto.php/photo/6200

Although it shows that 3GB was used for uploads!

Now i have checked and she only has used the following:

1) Outlook Express is always open
2) She is signed in as away on MSN Messenger/Live always

What i've done:
1 Windows Update is disabled
2 Changed the routers password
3 Disabled Adobe update

Utorrent is installed but has not accessed in the last 13 days and it is not running in the taskbar.

So with your guys help, where do i start!

 

[gregmcc]

chances are almost 100% its spyware. Use spybot - download and update and run a full scan.

 

[remybfg10k]

Busy downloading it as we speak

Also loaded PeerGuardian, to see whats happening:

I see port 1900 is trying to connect to an IP

 

[remybfg10k]

192.168.0.5.1900 > 239.255.255.250.1900:

It keeps doing that....

 

[RogueRunner]

That's a multicast address that is not supposed to go anywhere.