Forum Home
Press F1
 
Thread ID: 41960 2004-01-27 12:10:00 A Trojan at work?? ssssss (2100) Press F1
Post ID Timestamp Content User
210538 2004-01-27 12:10:00 When I am downloading a page on the internet, if I double-click on the two computer icon in the bottom RH corner of the screen, I get the 'Connected to paradisenet' box.
In this the 'Bytes received' counter is ticking away at a merry pace,
but more ominously so is the 'Bytes sent' counter.
Is this normal behaviour? or could it be a Trojan at work? I suppose adware is another possibility, but as soon as the 'Bytes received' stops ticking, so does the 'Bytes sent'.
ssssss (2100)
210539 2004-01-27 12:33:00 every web page comes to your system as a number of packets.....

every time your computer get a packet it says "yes got that, and then?"

this is a way to ensure that the data get there, if the sending computer does not get a ACK packet that it will re-send the data.

simple answer is this is normal.
robsonde (120)
210540 2004-01-27 12:35:00 As far as I am aware this is what going on:

Your computer asks for stuff from a server (bytes going out) server responds and sends appropriate stuff (bytes coming in), then there’s a quick confirmation on both parties that the packet sent out was indeed received on your end in tact and in one piece.

This part I believe is where there are packets sent to you again as a confirmation of the whole thing (“did you get that?”) and your PC responds with sending more bytes, (“yes I did”), or (“no I didn't, send it again”)!

The Internet, designed for the military, used by you!

You should probably worry when your bytes sent out start to get real big, this would be signs of some app ‘phoning home’ as it where. If you see modem activity when a page has finished loading, and your not downloading or uploading anything…get a hold of a free Add Aware version, and see what’s happening!
Stryker (4374)
210541 2004-01-27 12:37:00 Just something to keep in mind:
Most users download between 5 and 10x as much as they upload/send while online, so do the math and see if yours is like close to this. If you're sending very close to, or more, then I'd suspect something else.

See housecall.antivirus.com for a Free online Virus Scan if you're thinking it may be a Trjoan/Virus, or spybot.info for Spybot Search & Destroy to kill off any spyware you may have :-)

Hope this helps


Chill.
Chilling_Silently (228)
210542 2004-01-27 12:40:00 thats how it works.....

normal is the bytes sent being about 5% to 10% of byte recived.

if you send large files with kazza or such like then this wont appily.
robsonde (120)
210543 2004-01-27 20:27:00 Keep in mind too that there are ceratin programs that also operate "behind the scenes". Such as Windows automatic update will consult with MS to see if there are any new patches that have come out. Also antivirus and a host of others that do an online check for a later version or update.
Something like zoneAlarm firewall will let you know which programs are accessing the Internet apart from the normal "talking" the modems do between you and your ISP.
Pheonix (280)
210544 2004-01-28 07:12:00 Thanks for the advice folks.
I didn't know all that.
ssssss (2100)
1