unexplained downloads

[PeedeeS]

I'm afraid I still have a problem of unexplained downloads (see my original thread "strange downloads" started on 21 September 2010). It now appears that the large Office 2007 upgrade was not the cause.
Spybot, AVG and Advanced Sysytem care show nothing out of the ordinary. Netlimiter however advised "Outgoing connection to 196.33.166.201 port 80" as well as" 65.55.158.118" As a novice I am not sure what this means. Is one of these perhaps a site visited unintended and as such eating up large amounts of up and downloads? Furthermore, is it possible to put a name to these IP's?
Thanks again!

 

[kilobits]

yello

IP Trace reveals...
196.33.166.201
IP address [?]: 196.33.166.201
IP country code: ZA
IP address country: South Africa
IP address state: Western Cape
IP address city: Cape Town
IP address latitude: -33.9167
IP address longitude: 18.4167
ISP of this IP [?]: Internet Solutions
Organization: Internet Solutions
Host of this IP: [?]: a196-33-166-201.deploy.akamaitechnologies.com

IP address [?]: 65.55.158.118
IP country code: US
IP address country: United States
IP address state: n/a
IP address city: n/a
IP address latitude: 38.0000
IP address longitude: -97.0000
ISP of this IP [?]: Microsoft Corp
Organization: Microsoft Corp

So... Windows updates methinks....

 

[willemvdm]

Last month I also had something downloading. Also traced the IP and *seemed* to be windows updates, coming from a local server, so for a while I tolerated it. It would download about 80+MB and then stop. However, next day it would download again. Eventually used wireshark and traced it to Nokia's OVI update. I then did a manual update. For the manual update it also downloaded about 80MB, then user account control dialog came up. I suspect that with the automatic update windows refused to give the update elevated rights, causing the update to fail. After that the daily downloading stopped.

If Nokia is not the cause of your frustration, try wireshark. It is a bit overwhelming at first, but if you are willing to dig around a bit in all the data it provide, you should be able to figure out exactly witch program is doing the download. But if I were a betting man, I would take a bet it is Nokia OVI, same as I had.

Good luck.

 

[ToAsTeD]

Last month I also had something downloading. Also traced the IP and *seemed* to be windows updates, coming from a local server, so for a while I tolerated it. It would download about 80+MB and then stop. However, next day it would download again. Eventually used wireshark and traced it to Nokia's OVI update. I then did a manual update. For the manual update it also downloaded about 80MB, then user account control dialog came up. I suspect that with the automatic update windows refused to give the update elevated rights, causing the update to fail. After that the daily downloading stopped.

If Nokia is not the cause of your frustration, try wireshark. It is a bit overwhelming at first, but if you are willing to dig around a bit in all the data it provide, you should be able to figure out exactly witch program is doing the download. But if I were a betting man, I would take a bet it is Nokia OVI, same as I had.

Good luck.

My Nokia OVI also did that until a manual update.

 

[PeedeeS]

Thanks for your informative replies!!! Heatwarming.
I have long since disabled Windows automatic update although I suppose anything is possible, especially regarding the Cape Town IP, which seems strange.
I will definately have a look at Nokia OVI. In my opinion it is not user friendly at all. Nokia PC Suite is a much better option but that of course is a different topic!

 

[Srack0verflow]

i found thru netlimiter an unexpected constant 5kB/s upload to a russian, some americans, and a chinese peer. prolly some p2p scheme from this open beta MMO i installed? feels good limiting the whole process to 2 bytes (0.02kB) per second *evil grin*

edit:/
ja sorry for going OT, just felt i had to plug netlimitter, such a cool app

 

[PeedeeS]

I read up on "deploy.akamaitechnologies.com" and being a novice, it baffles me although I now have a better understanding of my problem. Is it at all possible to block "deploy.akamaitechnologies.com" from accessing my computer and if so, how?