| |
Author
|
Topic: Help! Somethings uploading off me..fast! (Read 912 times)
|
BenSW
News Director
Global Moderator
Elite Member
Offline
Gender:
Posts: 2644
Stewie for Governor!!!
|
Hey guys, I need some help, ive been noticing recently that when I'm online, even when all pages have stopped loading, and I have no downloads going, that those little computer screens in the bottom right hand corner are always flashing or sometimes on hard. This time when I clicked on it it read...
Bytes Sent: 31,410,145. Bytes Received: 4,929,799
That bytes received is ok, but why would just browsing online, cause that much uploading? I never used to get this, before it would always be around 2-4mb of uploaded data. But recently when I checked its been really high, like 20-40mb. I wouldnt really mind if it wasnt for my 3gb/month usage limit, I cant afford 20-40mb's of nothing every time I go online.
Also most of the time when I disconnect the computer from the internet, it comes up with a Network Connections window saying that I (or a program) has requested information from "ice.daitrix.net". I looked it up on google but it didnt find anything.
Ive tried, adaware, spybot, nod32, avg, all of those programs have the latest updates. And it fixes it temporarily but then this problem just keeps coming back. Also I havnt got kazaa or any other internet related programs
I dont know what to do, I hope you guys can help! 
Later 
EDIT: I just disconnected and connected again about 5-10mins ago and my uploaded data is already at 23.5mb's and still going hard! Help!  
|
|
|
|
|
Logged
|
PM me if you want a Gmail account, I have 50 invites. 
|
|
|
Cyclone
Honoured Member
Online
Gender:
Posts: 3732
|
So no spyware obviously? I'd try running the spyware/virus checkin programs in safe mode, that way if there is anything then it will find it.
Another thing to try is to do netstat -o at a command prompt, it will tell you the process of the id connected to that site, then you can use task manager to track down the PID and kill it
Hope that helps
|
|
|
|
|
Logged
|
AthlonXP 2600+ @ 2.53ghz
512MB XMS3200C2 @ 219mhz
ABIT NF7-S rev 2
Powercolor 9800 Pro @ 426/375
2x 160GB Seagate (SATA) in RAID-0
1x 120GB Seagate (PATA)
Antec Plusview 1000AMG
3DMark2001SE: 20147
|
|
|
BenSW
News Director
Global Moderator
Elite Member
Offline
Gender:
Posts: 2644
Stewie for Governor!!!
|
Hey thanks for the help man, I closed down a couple of processes and its stopped, well temporarily. Anyway I tried that netstat thing you said and it came up with this...
http://img28.exs.cx/my.php?loc=img28&image=netstat.jpg
LOL doesnt mean anything to me.
|
|
|
|
|
Logged
|
PM me if you want a Gmail account, I have 50 invites.
|
|
|
BenSW
News Director
Global Moderator
Elite Member
Offline
Gender:
Posts: 2644
Stewie for Governor!!!
|
I just ran Spybot, and it finds these same problems every time, removes them everytime and each time they come back...
|
|
|
|
|
Logged
|
PM me if you want a Gmail account, I have 50 invites.
|
|
|
Cyclone
Honoured Member
Online
Gender:
Posts: 3732
|
You'll get something like this
TCP cyclone:1039 baym-cs385.msgr.hotmail.com:1863 ESTABLISHED 1796
That means PID 1796 is connected to hotmail (msn). Soup task manager, go View->Select Columns, tick PID and look for the process that is registered to 1796, in my case msnmsgr.exe, so if it was something suss, kill it off.
|
|
|
|
|
Logged
|
AthlonXP 2600+ @ 2.53ghz
512MB XMS3200C2 @ 219mhz
ABIT NF7-S rev 2
Powercolor 9800 Pro @ 426/375
2x 160GB Seagate (SATA) in RAID-0
1x 120GB Seagate (PATA)
Antec Plusview 1000AMG
3DMark2001SE: 20147
|
|
|
Cyclone
Honoured Member
Online
Gender:
Posts: 3732
|
Looks like those programs keep putting themselves back on again
Try cleaning them out in safe mode
|
|
|
|
|
Logged
|
AthlonXP 2600+ @ 2.53ghz
512MB XMS3200C2 @ 219mhz
ABIT NF7-S rev 2
Powercolor 9800 Pro @ 426/375
2x 160GB Seagate (SATA) in RAID-0
1x 120GB Seagate (PATA)
Antec Plusview 1000AMG
3DMark2001SE: 20147
|
|
|
BenSW
News Director
Global Moderator
Elite Member
Offline
Gender:
Posts: 2644
Stewie for Governor!!!
|
Hey thanks a lot for the help man, I'm still not sure what it was exactly that was uploading but I closed a bunch of processes and it seems to have stopped now, man I was getting worried for a bit, I didnt even know my connection could upload that fast lol, I think I must have 256k upload as well, ah well  lol
Anyways thanks again for the help man, I'll try running those spyware programs in safe mode later.
Later
|
|
|
|
|
Logged
|
PM me if you want a Gmail account, I have 50 invites.
|
|
|
Cyclone
Honoured Member
Online
Gender:
Posts: 3732
|
No problem!
|
|
|
|
|
Logged
|
AthlonXP 2600+ @ 2.53ghz
512MB XMS3200C2 @ 219mhz
ABIT NF7-S rev 2
Powercolor 9800 Pro @ 426/375
2x 160GB Seagate (SATA) in RAID-0
1x 120GB Seagate (PATA)
Antec Plusview 1000AMG
3DMark2001SE: 20147
|
|
|
Terra
Full Member
Offline
Gender:
Posts: 454
Spam
|
I just ran Spybot, and it finds these same problems every time, removes them everytime and each time they come back...
Try running Spybot at boot-up, that way it will can before anything et's loaded into the system memory
You can find the option under the advanced settings...
Terracide...
|
|
|
|
|
Logged
|
Intel Pentium 4 2.4GHz, 512Kb, ´Northwood´ Asus P4T-E Mobo 2 X SAMSUNG Ram RAMBUS 800MHz, (2X256MB)512MB Creative GeForce4 Ti4600>>ordered an Sparkle 6800GT!  Creative Soundblaster Audigy CHIEFTEC, Dragon Alu Miditower 300W Western Digital Caviar WD2500JB Special Edition 250 GB ALPS, DF354, 1,44 MBB 3,5´ Floppydrive Creative CDRW 8x4x32 Sony, 17´, Multiscan CPD-E230, Creative Labs Inspire 5.1 5300 3D Mark 2001 SE: 12342(Detonator 40.41) http://service.futuremark.com/compare?2k1=4316533PC Mark 2002 CPU 5853/RAM 5998/ HD 797 http://service.futuremark.com/compar |
|
|
Cyclone
Honoured Member
Online
Gender:
Posts: 3732
|
Or in safe mode, that should do the same thing
|
|
|
|
|
Logged
|
AthlonXP 2600+ @ 2.53ghz
512MB XMS3200C2 @ 219mhz
ABIT NF7-S rev 2
Powercolor 9800 Pro @ 426/375
2x 160GB Seagate (SATA) in RAID-0
1x 120GB Seagate (PATA)
Antec Plusview 1000AMG
3DMark2001SE: 20147
|
|
|
Terra
Full Member
Offline
Gender:
Posts: 454
Spam
|
Or in safe mode, that should do the same thing
No not really...
Most reg settings get loaded when booting up in safe mode, belive me, I have tested it...
Terra...
|
|
|
|
|
Logged
|
Intel Pentium 4 2.4GHz, 512Kb, ´Northwood´ Asus P4T-E Mobo 2 X SAMSUNG Ram RAMBUS 800MHz, (2X256MB)512MB Creative GeForce4 Ti4600>>ordered an Sparkle 6800GT! Creative Soundblaster Audigy CHIEFTEC, Dragon Alu Miditower 300W Western Digital Caviar WD2500JB Special Edition 250 GB ALPS, DF354, 1,44 MBB 3,5´ Floppydrive Creative CDRW 8x4x32 Sony, 17´, Multiscan CPD-E230, Creative Labs Inspire 5.1 5300 3D Mark 2001 SE: 12342(Detonator 40.41) http://service.futuremark.com/compare?2k1=4316533PC Mark 2002 CPU 5853/RAM 5998/ HD 797 http://service.futuremark.com/compar |
|
|
Cyclone
Honoured Member
Online
Gender:
Posts: 3732
|
Maybe registry settings, but programs in startup, windows\currentversion\run etc won't be executed in safe mode...Well that's what's happened in my experience...
|
|
|
|
|
Logged
|
AthlonXP 2600+ @ 2.53ghz
512MB XMS3200C2 @ 219mhz
ABIT NF7-S rev 2
Powercolor 9800 Pro @ 426/375
2x 160GB Seagate (SATA) in RAID-0
1x 120GB Seagate (PATA)
Antec Plusview 1000AMG
3DMark2001SE: 20147
|
|
|
BenSW
News Director
Global Moderator
Elite Member
Offline
Gender:
Posts: 2644
Stewie for Governor!!!
|
The spyware programs are always finding stuff that seems to have nothing to do with this problem. I dont know whats to do. Also when I go to "Fix selected problems" in spybot, it starts fixing them, then gives me some error, then I can click it again, and it starts fixing more problems and it comes up with the error again,I can usually do this until I'm down to one problem left that it wont fix. Normally in the "DSO exploit" category, which is the only one (I think) that has come up everytime Ive run it so far.( well recently anyway ). Does this mean anything to you guys?
Thanks for the help!
|
|
|
|
|
Logged
|
PM me if you want a Gmail account, I have 50 invites.
|
|
|
Cyclone
Honoured Member
Online
Gender:
Posts: 3732
|
DSO exploits aren't anything to worry about, they're not executables
If spybot can't remove them it's probably because they're sitting in memory, as terra said run them before windows starts or run them in safe mode.
|
|
|
|
|
Logged
|
AthlonXP 2600+ @ 2.53ghz
512MB XMS3200C2 @ 219mhz
ABIT NF7-S rev 2
Powercolor 9800 Pro @ 426/375
2x 160GB Seagate (SATA) in RAID-0
1x 120GB Seagate (PATA)
Antec Plusview 1000AMG
3DMark2001SE: 20147
|
|
|
|
|
 |
| |
|
