PC uploading as well as downloading

Dunpony

I'm getting near my broadband limit way too fast, and having installed BitMeter it seems that uploads are to blame. Trouble is I've no idea where they are going, or what started it.

I've scanned with a couple of the virus scanners on the sticky thread but nothing comes up. My ISP can't help.

I can't affors to go over my limit, and I'm worried about security as I bank online.

Please can anyone help?

gonzo127

best thing to do is download and run hijack this so we can see what programs you are running,

also are you the only person who uses the computer?

weegie.geek

What ISP are you with, and what package are you on? I'd look into changing to an ISP that charges a flat rate.

fiddiwebb

How much are you uploading according to Bitmeter and what is your limit?

AS gonzo says is there anyone else who has access to your computer, is your wi-fi secured and do you use any torrent software?

KingL

Some of the TV channels official 'downloading' sites use peer-to-peer technology, do you use those? You might be inadvertently uploading TV programmes in the background.

PasturesNew

I've seen this too, I have mobile broadband and my up/down figures are usually close ... and I don't upload things. I don't watch TV online, I don't do any peer-to-peer stuff. I just surf the net.

I've been wondering this question myself for some time.

Dunpony

Thanks

I'm the only one who uses the PC, my network is secure. I don't do Peer to Peer, just surfing, forums and emails. I don't have 'fancy' tv.

I'm with Madasafish with a 5gb limit, and usually use about 2 of that - I'm currently using about .5 gb in 2 days. I'm out in the sticks so can't get cheap deals

According to BitMeter I'm uploading between about 20 - 80% of the download. Sometimes more or less!

Hijack this here
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:09:50, on 18/06/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\stsystra.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MozyHome\mozystat.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\MozyHome\mozybackup.exe
C:\Program Files\Outlook Express\msimn.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = dell.co.uk/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = mysearch.myway.com/jsp/dellsidebar.jsp?p=DK
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = dell.co.uk/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = dell.co.uk/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = shell.windows.com/fileassoc/0409/xml/redir.asp?Ext=DAT
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: MozyHome Status.lnk = C:\Program Files\MozyHome\mozystat.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe (file missing)
O23 - Service: Symantec Password Validation (ccPwdSvc) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe (file missing)
O23 - Service: MozyHome Backup Service (mozybackup) - Mozy, Inc. - C:\Program Files\MozyHome\mozybackup.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe

--
End of file - 4516 bytes
I've edited out the http bit on the links

weegie.geek

You sure it isn't Mozy doing your backups?

edit: and if you're paying a tenner a month for Madasafish and finding a 5GB (!) limit a bit tight, check if you can get O2 where you are. Especially if you're already an O2 mobile customer. If you're not, you can get a much better service for £2.50 more/month, but if you're an £O2 customer you'll get it for 2.50 less than you currently pay. And you'll get a much higher limit, 40GB i think. 3 months free, and Quidco on top.

Dunpony

I don't think so, because the upload heappens with each download - mozzy backsup every so often. I'll disable it to see though as it'd be an easy solution...

Oooo I didn't realize that about the mobile. I'll check it out my contracts nearly up!

I'm worried where the upload info is going 5gb is usually plenty

weegie.geek

Well when you're downloading you also need to upload to tell the server you're downloading from to send the next bit of the file, so there WILL be upload activity whenever you're downloading. What speed are you uploading and downloading at? When you close mozy, your internet browser etc, what speed are you doing then?

Dunpony

O2 is a nogo unfortunatly, I'm outside their area. They can only offer £17.50 / £22.50 which is a bit steep:(