Forum Home
Press F1
 
Thread ID: 136560 2014-03-15 22:03:00 Excessive "Upstream" data? Pato (2463) Press F1
Post ID Timestamp Content User
1370306 2014-03-17 00:28:00 Try the program from here: https://netbalancer.com/

It can show network usage on a per-process basis
Agent_24 (57)
1370307 2014-03-17 00:56:00 Try the program from here: https://netbalancer.com/

It can show network usage on a per-process basisThanks Agent. I do have WiFi, and I thought about someone hijacking if. How would I check that?.
Pato (2463)
1370308 2014-03-17 01:26:00 Easiest way would probably be to disconnect your own systems from WiFi, and check the network activity lights on the router - assuming they blink when data is being transferred. I know some Vodafone routers don't seem to do that.

Another thing would be to look in the router's config page and look at the LAN device list. The router should list MAC addresses, IP addresses and maybe even hostnames of all devices connected to your network. Look for any that aren't yours.

Next thing to try would be to change your WiFi password\settings and see if the usage stops. Make sure you're using WPA2 with AES, a strong passphrase and turn WPS off if the router has it.

You could also try just completely disabling the WiFi interface on the router for a couple of days and see if it makes a difference.
Agent_24 (57)
1370309 2014-03-17 01:37:00 I appreciate your suggestions. Thanks. Pato (2463)
1370310 2014-03-17 02:24:00 Wainuitech, Following your instructions re ESET. Changed to Interactive mode and rebooted but got no pop-ups. Where do I check in ESET what is using data?.
I have added to Dropbox but it is now full. You may like to comment further when you get a spare moment. Watching Networx I can see the upstream data ticking over
so something is amiss.
Pato (2463)
1370311 2014-03-17 02:34:00 Did Netbalancer not show any specific process using data? Agent_24 (57)
1370312 2014-03-17 02:44:00 Did Netbalancer not show any specific process using data?I have just installed it and am now reading up on how it works. With my old brain it takes a while for things to register. LOL. Pato (2463)
1370313 2014-03-17 03:04:00 Wainuitech, Following your instructions re ESET . Changed to Interactive mode and rebooted but got no pop-ups . Where do I check in ESET what is using data? .
I have added to Dropbox but it is now full . You may like to comment further when you get a spare moment . Watching Networx I can see the upstream data ticking over
so something is amiss . Smart Security wont actually show you exactly whats going out ( not the program using data) it will only show you the actual amount of data ( from tools - Watch Activity)

To see what is allowed you need to open the rules, as per picture posted in #16 . From there you can work through the rules and see whats auto allowed out, the option set to Auto on the firewall, when first installed has detected something as "OK" and marked it as such . It may not actually be any sort of infection, it could be some legit program .

What I'd suggest is look through the list of allowed programs ( it will be long depending on how many programs are installed) if there looks like any program out of place, remove it by expanding the + beside the program - right click / Remove . It wont uninstall the program, all it will do is stop auto connections through the firewall . ( reboot required) If its wanting internet access right away have a look at what it is, deny it temporally and see if the data carries on - repeat if needed .

Something is either masquerading as a legit program or something is running in the background .

That program Agent linked should show it as well unless its hiding .

Often something using that amount of data so quickly is some sort of file sharing program seeding . ( or similar) you can remove google drive etc as well from the allowed rule, even temporally, deny when it prompts and see what happens .
wainuitech (129)
1370314 2014-03-17 03:21:00 Thanks wainui. I sure appreciate you taking the time to help. I had already removed Google Drive and I think that may have been the problem. Fingers crossed!! Pato (2463)
1370315 2014-03-17 03:28:00 Welcome to the world of trial and error ;) wainuitech (129)
1 2 3 4