PC constantly uploading

adonis

I have recently changed broadband supplier and have been checking broadband usage, and I have noticed my desktop is continuously uploading data.

If I turn off wireless it makes no difference and only stops when I unplug the ethernet cable from the desktop.

The processes running on kaspersky net monitor are kaspersky and svhost.exe.
I have scanned with kaspersky and malwarebytes (malewarebytes found and removed 4 lameshield trojans ) but it is still the same.

What shall I do next ?

It is running XP home

bluesnake

personally I would get the free procexp (process explorer) and install/unzip it.

then go to a command prompt type netstat -a -o and the pid numbers are the ones we are after.

Now run procexp select 'view' tick show processes from all users, and show unnamed handle and mappings. Then look to see which suspicious program own the pid and you can usually kill the process with this app too.
the second method should work, is shorter, but is for viewing only, and to be honest I prefer the first method.
Go to an elevated command prompt (administrator) and type netstat -b

I am 99% sure it not your new broadband supplier, unless they have given you some software to do ????? Also your new router from the supplier may have open ports which your old one had firewall off?

get yourself a free bandwidth monitor as they often show if your line is doing something unexpected

closed

http://live.sysinternals.com/Tcpview.exe

has kaspersky got a firewall?

Dave_C_2

Are you sure it's not something mundane like a torrent client constantly uploading?

Ctrl+Alt+delete and use the Windows Task manager to see what processes are running.

Dave

adonis

Kaspersky has a good firewall as far as I know, it is only because I have gone from unlimited to 60gb a month and the new router was under my nose that I noticed the ethernet light blinking a lot.

It seems to have stopped now and only blinks when I do stuff online.

I will try all your suggestions and see if I can find out what processes are running when it does it.
As long as it's nothing dodgy running I am not too worried about it.

Thanks for the ideas.