Someone uploading something onto my PC
An interesting occurence -
with all apps closed,
even with an internet lock by zone alarm.
Of course if I disconnect the cable it doesn't occur so it is not incorrect.
Between 1-4 kbps
It is using services and controler app it seems.
How do I know? I use bandwidth monitor., and the network status numbers are steadily showing something is happening like I received more than 6000 packets since I restarted...
Adaware was run so the comp is meant to be clear of that crap.
Antivirus runs everyday and I keep it automatically updated.
What is it?
Could it only be MS updating the windows? I doubt it though I'd expect them to use all the bandwidth as all is available at teh moment...
Any idea on how to figure out what it is... btw I have a router with NAT firewall too...
It's a Win 2000, D-Link router, Zonealerm, and AVG antivirus...
:confused: :confused: :confused:
This is sooo weird - OK maybe it's simple, someone help please :eek:
For the purposes below I will split the story into
"main PC" - the one that I usually use, that can now access the internet - on Win2000
"two others" - cannot access the internet from the same router - Win2000 and WinXP on them
1. my home network/router worked fine until 2 days ago
2. internet access stopped
3. I figured it was the router so I just unplugged it , plugged it back after a 1minute+ wait, and everything was on and fine
4. not quite everything, everything on my main PC at least for internet access, however as it seems today the two other PC's on the network cannot access the net anymore
5. those two PC's can see each other over the router, however none of them can see the "main" PC that is plugged in the same router but can access the interet (unlike those two)
6. the IP addresses on all PC's are setup on automatic, and as such the connection was working on all until a couple days ago
7. the IP address on the main PC is in 81.xxx.xxx.xxx range as is the Gateway:eek:
8. I have 3 different working installation s of Win 2K in different partitions on the main PC and they all pick up this weird IP address up and connect to the net with the same settings.
9. I couldn't replicate the correct settings manually on the main PC to connect to the net
10. The "supposedly normal 192.168.0.1" address for the router to access its control panel trough IE - DOES NOT WORK; nor does the new "gateway" IP address
11. The Router RESET button does NOT reset it to standard factory defaults anymore (keept the button pressed for longer than 10 seconds)
12. SOMETHING SLOWLY BUT CONSTANTLY UPLOADS ON THE MAIN COMPUTER :eek: the upload is been going on for at least 4hours @ 1-4 kbps...
13.Immediatly when I plug in the network cable in -the upload just resumes, it doesn't respond to internet lock in ZoneAlarm... just plugging out the network cable works
14.Setting the same IP address, gateway, DNS servers on the other Win2K machine DOES not let me to the net on that machine.
Nothing uploads on the "other two" PC's thankfully.
IT IS FREAKING ME OUT maybe its nothing special, but ~:eek:
What am I being super hacked, going trough the NAT firewall on the router and ignoring Zone Alarm?
Can I check what is being uploaded on my PC, is there some utility that can check for change in filesize...
and is there a way to figure out the mysterious new IP from the router
I hope this PC will still be running when I wake up in the morning :fu: :argh: :scarey:
--- morning here, everything still on and this slow upload continues...
did I mention that I have all windows updates available.
I had this same problem with mysterious packets that suddenly began being shuffled across my network. I found out that it was a Windows service causing the problem.
Go to the XP machine and disable the SSDP Discovery service. If your problem is the same as mine was, that'll fix it.
Thanks, I'll check it out
btw, did you find out what that service does? why and what was it uploading?
P2P apps like eDonkey can cause this kind of activity. After you close the software you will still get other PCs attempting to connect for a couple of days because those other clients cache your IP for a while. This threw me off once because I could see my cable modem going crazy, even though nothing was running. Your firewall log should tell you what port the traffic is going to.
|All times are GMT -5. The time now is 04:13 PM.|
Powered by vBulletin® Version 3.7.1
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Copyright ©1998 - 2014, nV News.