PDA

View Full Version : Windows XP constant network transmits


SecretFire
05-07-03, 08:49 PM
I'm using windows XP home, and for some reason, it continually transmits out through the cable modem. The transmit light flashes almost constantly, and the task manager shows approximately .5-1% network usage constantly. It has internet connection sharing with a windows 98 machine.

1. I've scanned with spybot and adaware, and there is definately no spyware.

2. The transmissions continue even when all other programs are shut down, and only windows processes are left.

3. The transmissions also continue when the 98 machine is shut down.

Anyone know what keeps sending stuff through my connection?

su root
05-07-03, 09:07 PM
Virus Scan? Some viruses make outgoing network connections, and sustain them.

Do you have a cable/dsl modem? If so, is the Transfer or Recieve light blinking when this happens?

Cube
05-07-03, 09:14 PM
Originally posted by SecretFire
I'm using windows XP home, and for some reason, it continually transmits out through the cable modem. The transmit light flashes almost constantly, and the task manager shows approximately .5-1% network usage constantly. It has internet connection sharing with a windows 98 machine.

It's just like when you have a networked computer in an office. The activity light constantly flashes because it's an active network. Nothing to be concerned about.

su root
05-07-03, 09:25 PM
Originally posted by Cube
It's just like when you have a networked computer in an office. The activity light constantly flashes because it's an active network. Nothing to be concerned about.
But it's transmitting. If it was receiving, then yeah, no problems at all. The only thing that should chat would be NetBIOS ("Windows Networking"), and that should only chat occasionally.. once every few minutes or so.. not a constant .5-1%.. that's .5-1kilobits/s. Sounds something like an IRC connection to me.. maybe not.. it's a little too small for that.. way too small for DDOS.

cerberus
05-07-03, 09:32 PM
can u see what ports its using? get u a router or a software firewall... see what ports its using... block them... look the port up here http://www.seifried.org/security/ports/

su root
05-07-03, 09:40 PM
start/run/
type cmd

then type netstat
see what open connections there are
also type net use
that will list all netbios connections.

Cube
05-08-03, 04:54 AM
Originally posted by su root

But it's transmitting. If it was receiving, then yeah, no problems at all. The only thing that should chat would be NetBIOS ("Windows Networking"), and that should only chat occasionally.. once every few minutes or so.. not a constant .5-1%.. that's .5-1kilobits/s. Sounds something like an IRC connection to me.. maybe not.. it's a little too small for that.. way too small for DDOS.

That's true.

SecretFire, check out the Processes tab and see if there are any strange files, possibly any that are using CPU resources. Maybe even take a screenshot and post for us. That way we might be able to tell if anything is suspicious.

SecretFire
05-08-03, 05:24 PM
I've been watching it some more, and it's closer to .1%-.3% most of the time. It's a cable modem, and yes, the transmit light is flashing all the time.

I've scanned, and I'm relatively sure there isn't a virus/trojan on my system.

"Net use" doesn't show any connections, and I'm still playing around with netstat and netstat -a

I posted this here because I thought that there might be some kind of windows XP thing where it constantly ping a network connection or something.

I should also mention that LAN 2, the connection to the 98 machine, pretty much stays at 0% (Aside from an occasional bit of activity which I assume is it pinging the network)