| Forum Home | ||||
| Press F1 | ||||
| Thread ID: 47933 | 2004-08-09 10:34:00 | Excessive Upload Volume | Phil_W (6005) | Press F1 |
| Post ID | Timestamp | Content | User | ||
| 259919 | 2004-08-09 10:34:00 | Recently my computer has started automatically opening an internet connection, and started uploading at a greater proportion than usual (cf download data quanitity). A full scan via up-to-date Norton Internet security/ virus check has not shown any problem. The computer is on a small (4 total) network, but even if all other computers are off the problem continues. Autoconnect is enabled to allow the other computer users to access the internet, so I want to solve the problem rather than hide it by disabling the autoconnect. Is there any way I can find what site is being uploaded to, ?as a hint to finding what is controlling this. Is there anyway to scan the computer to find the cause as NAV seems to miss it. Closing ports via manual configuration (?port 1027) doesn't fully stop it. Any ideas? |
Phil_W (6005) | ||
| 259920 | 2004-08-09 10:38:00 | your firewall should list what apps are connecting to the net. | tweak'e (174) | ||
| 259921 | 2004-08-09 10:40:00 | Is windows update downloading updates??. bring up task manager and see what is running. hth |
johnboy (217) | ||
| 259922 | 2004-08-10 07:42:00 | Yep, and thanks. Symantec firewall logs lots of things 'active', so it's difficult to know what is really making the traffic. It's perverse I know but symantec doesn't seem to have an easily used means of identifying what exactly is active at the time. The connections log seems to note stuff like 'localhost' is quite active mostly thru port 1027 (not sure what port this is, so it could be anything). A later post suggest looking at task manager and such helpful 'programs' as svchost along with 40 other 'image names' comes up, some of which are active for a few percent of the time. I'll try successively ending each process one by one and see what halt the traffic. Interestingly enough I note that the network hub is very active, whn other computers are on, ? a netwrok setting has been altered. Trouble is I've fiddled with so many things it hard to keep a count of it. |
Phil_W (6005) | ||
| 259923 | 2004-08-10 09:08:00 | Seems there is a worm, found and deleted securityresponse.symantec.com found on another computer, creating the network activity, and ?reinfecting shared internet hosting machine... difficult to get rid of without going direct to each machine when isolated. ?perhaps it creates the internet activity as it sees this as another 'part' of the network... Or am I dreaming? |
Phil_W (6005) | ||
| 259924 | 2004-08-10 09:19:00 | Hi buddy , can't get the link to work here ....? | KatiMike (242) | ||
| 259925 | 2004-08-10 09:46:00 | Corrected link (securityresponse.symantec.com) | tommy (2826) | ||
| 1 | |||||