Forum Home
Press F1
 
Thread ID: 136560 2014-03-15 22:03:00 Excessive "Upstream" data? Pato (2463) Press F1
Post ID Timestamp Content User
1370296 2014-03-16 03:23:00 I notice that my upstream today is showing 2.4MB and I have hardly used the Computer. At this rate I will have used up my monthly allowance of 20GB
by just leaving the computer running. It is very puzzling!!
Pato (2463)
1370297 2014-03-16 04:21:00 Try this: This is for Windows 7 and before -- Open Task Manager ( Ctrl+Alt+Del) have a look in the applications tab, apart from your browser and networx, what else is running ( if anything).

If nothing, you can post a startup log if you want, open Ccleaner, on the left, click Tools Then Startup Button, there it should show everything that running - bottom right, click save to text file - open the file, and copy/paste its contents back here:

Also what Antivirus / Firewall are you using ?
wainuitech (129)
1370298 2014-03-16 04:36:00 Try this: This is for Windows 7 and before -- Open Task Manager ( Ctrl+Alt+Del) have a look in the applications tab, apart from your browser and networx, what else is running ( if anything).

If nothing, you can post a startup log if you want, open Ccleaner, on the left, click Tools Then Startup Button, there it should show everything that running - bottom right, click save to text file - open the file, and copy/paste its contents back here:

Also what Antivirus / Firewall are you using ?Yes HKCU:Run GoogleDriveSync Google "C:\Program Files\Google\Drive\googledrivesync.exe" /autostart
Yes HKCU:Run MobileDocuments Apple Inc. C:\Program Files\Common Files\Apple\Internet Services\ubd.exe
Yes HKCU:Run msnmsgr Microsoft Corporation "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
Yes HKCU:Run SkyDrive Microsoft Corporation "C:\Users\Patrick\AppData\Local\Microsoft\SkyDrive\ SkyDrive.exe" /background
Yes HKCU:Run SUPERAntiSpyware SUPERAntiSpyware C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
Yes HKCU:Run swg Google Inc. "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe"
Yes HKLM:Run Adobe ARM Adobe Systems Incorporated "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
No HKLM:Run ApnUpdater "C:\Program Files\Ask.com\Updater\Updater.exe"
No HKLM:Run AppleSyncNotifier Apple Inc. C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
Yes HKLM:Run APSDaemon Apple Inc. "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
Yes HKLM:Run BCU DeviceVM, Inc. "C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe"
No HKLM:Run CanonQuickMenu CANON INC. C:\Program Files\Canon\Quick Menu\CNQMMAIN.EXE /logon
Yes HKLM:Run egui ESET "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
Yes HKLM:Run HDAudDeck VIA C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe -r
No HKLM:Run IJNetworkScannerSelectorEX CANON INC. C:\Program Files\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE
No HKLM:Run iTunesHelper Apple Inc. "C:\Program Files\iTunes\iTunesHelper.exe"
Yes HKLM:Run NetWorx SoftPerfect Research "C:\Program Files\NetWorx\networx.exe" /auto
Yes HKLM:Run QuickTime Task Apple Inc. "C:\Program Files\QuickTime\QTTask.exe" -atboottime
No HKLM:Run Reader Application Helper Sony Corporation C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper .exe
No HKLM:Run SDTray Safer-Networking Ltd. "C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe"
No HKLM:Run SunJavaUpdateSched Sun Microsystems, Inc. "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
Yes HKLM:Run WordWeb WordWeb Software "C:\Program Files\WordWeb\wweb32.exe" -startup
No Startup Common Air Mouse.lnk RPA Tech C:\PROGRA~1\AIRMOU~1\AIRMOU~1\AIRMOU~1.EXE
Yes Startup Common CrashPlan Tray.lnk Code 42 Software, Inc. C:\Program Files\CrashPlan\CrashPlanTray.exe
Yes Startup Common Microtek Scanner Finder.lnk C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe
Yes Startup User Adobe Gamma.lnk Adobe Systems, Inc. C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Yes Startup User Dropbox.lnk Dropbox, Inc. C:\Users\Patrick\AppData\Roaming\Dropbox\bin\Dropb ox.exe
No Startup User OpenOffice.org 3.3.lnk C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE
No Startup User PowerReg Scheduler.exe C:\Users\Patrick\AppData\Roaming\Microsoft\Windows \Start Menu\Programs\Startup\PowerReg Scheduler.exe

Browser is the only thing runnings in applications tab. I am running ESET Smart Security 7
Pato (2463)
1370299 2014-03-16 04:43:00 Uninstall ask toolbar

May as well delete the entries that say no in ccleaner if it's installed. As well as Quicktime

Wouldn't Googledrivesync / Dropbox / Skydrive do something if they're running?
Speedy Gonzales (78)
1370300 2014-03-16 04:51:00 Uninstall ask toolbar

May as well delete the entries that say no in ccleaner if it's installed. As well as Quicktime

Wouldn't Googledrivesync / Dropbox / Skydrive do something if they're running?Thanks for your help. Perhaps I should get rid of Googledrivesync as Google Drive is the only
one added in the last couple of days. I have had Dropbox and Skydrive for some time. Thought Google Drive would give me a bit more storage but it may have just given me a pain.
Pato (2463)
1370301 2014-03-16 05:12:00 Okay, nothing really nasty out of place, Is there anything been added to Dropbox ?

Now a process of elimination: since you have smart security this will be easy. ( may take a while but hopefully what ever it is will raise its head early on)

First - open Smart Security On left, Click on Setup - on right - Network, switch to interactive mode ( if not already selected.) Yours may be set to Automatic.( default setting)

5619


Now to check whats using data, and multitask :)

Reboot ( you dont need to but it will help sort whats using the data) When it reboots expect to get pop ups asking for certain things to access the internet - look at what they are, you then need to decide to allow or Deny . If its something obvious like your browser, select Allow / Temporary. An example I just disabled Allowing skype. ANYTHING wanting out will have to be approved:

5620


At the same time check the usage data, sooner or later the one thats doing it will show the usage.

IF the data is still being used, you will have to go into the rules and figure out whats been allowed and remove it, then Temporary deny,sooner or later something will be stopped or allowed and the data will stop. == Thats the culprit.

Note: if you Temporary Deny your browser it wont load, so using Temporary will show if something is using data, if its not then next time you can allow / Remember ( create Rule) and you wont be asked again from that program.( untill theres a change)

To get to those rules setting, from the settings on left - on right Configure rules and zones.

5621
wainuitech (129)
1370302 2014-03-16 10:54:00 I notice that my upstream today is showing 2.4MB and I have hardly used the Computer. At this rate I will have used up my monthly allowance of 20GB
by just leaving the computer running. It is very puzzling!!

I don't see how... 2.4MB is nothing. Unless you meant 2.4GB?

You don't have WiFi do you? Perhaps someone has hijacked it.
Agent_24 (57)
1370303 2014-03-16 18:17:00 I notice that my upstream today is showing 2.4MB At this rate I will have used up my monthly allowance of 20GB
by just leaving the computer running.

There is 1024MB in a GB. 2MB is very small.
THere are all sorts of things that could do that - MS updates, Google Updates, "phone home" stuff running on the PC.....
I never let anything automatically do anything.
Any updating is done manually by me, not when some program decides.


A firewall (Not the built in ones) can be good for seeing what tries to get out to the net. You'd be surprised how many programs report back on things (DRM). That obviously, uses the net.......
pctek (84)
1370304 2014-03-16 20:20:00 Any changes to your modem/router? Presume the modem firewall is on? A DNS resolver on the WAN port can create a lot of bandwidth.

This site will check this www.thinkbroadband.com
linw (53)
1370305 2014-03-17 00:19:00 I don't see how... 2.4MB is nothing. Unless you meant 2.4GB?

You don't have WiFi do you? Perhaps someone has hijacked it.Yep. 2.4GB
Pato (2463)
1 2 3 4