Please register or login. There are 0 registered and 911 anonymous users currently online. Current bandwidth usage: 326.30 kbit/s September 24 - 08:35am EDT 
Hardware Analysis
Forums Product Prices

  Latest Topics 

More >>


  You Are Here: 
/ Forums / Windows Vista /

  virus related problems  
 Date Written 
Jack Rock Jan 29, 2010, 01:23am EST Report Abuse
My system downloading continuosly even when there are no application running, is it virus?
how can i detect what program is downloading, b,coz no such suspicious program show up in the task manager and the system is almost idle.
no limewire running.
The moment i plug the internet cable it start downloading as can be monitered in the net meter even before the network symbol appears.
and also my internet download is not unlimited.

i have kaspersky internet security 2009 running
os - vista
how to fix it.

Want to enjoy fewer advertisements and more features? Click here to become a Hardware Analysis registered user.
TamTheBam Jan 29, 2010, 03:56pm EST Report Abuse
>> Re: virus related problems

Disable your Torrent Client, and seed less!!! And remember to disable torrent clients on
start up. Lol

....I'm back, but only as a part-timer... :)
john albrich Jan 30, 2010, 12:27am EST Report Abuse
>> Re: virus related problems

"No application running"? Don't forget background processes and services.

In some cases the "traffic" report might be based on ISP<-->network adapter network traffic monitor reports from your network adapter...not whether your adapter has actually transferred meaningful data between the ISP and the computer itself.

I can think of a number of things that might result in what you're seeing...probably a combination.

ISP simply regularly querying connection status to your network adapter (e.g. to determine if it needs to keep allocating resources to your connection, monitoring for network outages/service quality metrics, looking for possible theft of services by monitoring signal strength, etc. Some of that I would suspect could be transparent to the user, but it would depend on exactly what the ISP is doing, whether it bundles multiple tasks into a single query, etc.)

Your internet security application working in the background, constantly monitoring your connection, forcing minimal handshaking/"dialogue" with the ISP to check network status/integrity...making sure nothings been hijacked, tapped into (e.g. by getting reports on signal strength) etc. It would of course depend on just how sophisticated the internet security package is.

Processes checking for updates (although I would think this would appear more as a relatively larger data spike above constant "background" clutter).

Possibly ISP/mail service checking to see if you have any outgoing pending/deferred email to send.

If using an online backup service it might be getting acknowledgments from sending small bundles of data to backup when the computer is not being heavily used...although you'd see both upload and download usage in this case.

If using a USB VoIP adapter (like "magicjack") there might be some continuous low-level ISP<-->VoIP adapter handshaking going on.

And so on.

I don't know if your ISP applies any or all such "background" activity to your quota but I suspect they might.

Of course disconnecting either the ISP-side connection or the computer side connection of your modem would take the values to 0, but even if you software disable the "internet connection" via an internet security application, some of those activities could continue showing "download" activity as they don't actually result in any effective data transfer to/from the OS itself.

A nice compact network activity monitor/logger that lets you track activity over the last second, last few hours, days, months, with stats for user-selected months, is BitMeter2. It would let you do a rough comparison between your measured network traffic and the monthly quota records of your ISP. For example, assuming I've had BitMeter2 running all the time, I can go back and look at the upload/download traffic stats for each month for the last six months

edit to add:
By the way, if all you want to do is end ALL data transfers between the ISP and your hardware, is do what I do. Insert a quality coax cable switch or telephone cable switch* between your wall connection and your hardware. Just switch to a null connector when you want absolute connection security or zero data transfer. That way there is no way the ISP can rack up traffic against your quota from that specific connection.

*or whatever connection you've got going between your hardware and the wall connection...or turn off your wireless adapter. Note that turning off your computer's wireless adapter only provides does not stop possible handshaking between the ISP and your wireless modem/router/switch. So in theory the ISP might still be counting those transfers toward your quota.

edit to add:
Note also that just disconnecting the cable (ethernet, USB, etc) between your computer's network adapter and your ISP modem (broadband, DSL, etc) or router/switch will not stop possible handshaking between the ISP and your external modem.

edit to add:
I could also have advised to turn off your broadband modem to provide both complete security and stop all data transfers, but the modem's power-on cycle can take a relatively long time compared to just flipping a switch on the cable on the ISP side of the modem.

James Dean Aug 10, 2011, 08:15am EDT Report Abuse
>> Re: virus related problems
System restoration will do the trick for you go to safe mode and perform the system restore to back date...check if this works..

john albrich Aug 10, 2011, 09:43am EDT Report Abuse
>> Re: virus related problems
James Dean said:
System restoration will do the trick for you go to safe mode and perform the system restore to back date...check if this works..


You seem to be shotgunning a number of oldish threads today. But regardless, for this particular thread, your advising the user to blindly perform first-thing a Restore Point operation is extremely premature and could cause loss of important updates, user settings, even cripple current operations, etc. which could result in the user having to spend a huge amount of time spent recovering after the action and can even result in lost user data due to registry changes.

Going to a prior Restore Point is not without consequences...some can be severe.
At the very least, the user should be made aware of these possible consequences before being told to execute the operation so he/she can make a risk assessment and/or carefully schedule the operation for a non-critical time. For example, at the start of a weekend so that it doesn't impact daily business operations if the user has to spend a lot of time re-installing updates, resetting configurations, etc.

At the very least one should also advise the user to perform a complete system disk backup prior to going to a prior Restore Point. That way, if the problem is NOT fixed by going to the Restore Point, the user can use the backup image to bring the system back to the exact state it was in prior to executing the Restore Point operation...easily and quickly. That could save a huge amount of time and headache.

Before going to a prior Restore Point, the user is better off first looking for other possible reasons for this kind of perceived activity. It could simply be the result of the user mis-stating the problem or symptoms, the user not understanding the data being examined, background processes checking hardware status thus appearing to be downloading data from the ISP, etc.

James Dean Aug 17, 2011, 05:41am EDT Report Abuse
>> Re: virus related problems
You are right i was just giving up a common solution to the issue by the way thanks for your feedback....

John pase Aug 18, 2011, 02:51am EDT Report Abuse
>> Re: virus related problems
System restoration can be the option....
that will help.



  Topic Tools 
RSS UpdatesRSS Updates

  Related Articles 

A weekly newsletter featuring an editorial and a roundup of the latest articles, news and other interesting topics.

Please enter your email address below and click Subscribe.