Continuos/Phantom DSL downloading problem

Here is my big headache, which I posted in the malware removal forum.
The reply I got (from Abri, Thanks!) is below
Basically, we have a continual downloading going on within our networked computer system. Except we don't download anything but a few (spybot, AVG Free and other windows updates, plus listen to a few internet radio shows at 20kbs per week). Right now our usage meter our DSL provider (phone co) furnishes shows us at 6.33 gigabytes for the month so far. Uusually by the 20th to 23rd we are at 10gig and then the fees accumulate.

If we had any data or files being put onto a hardrive then maybe we have nothing to gripe about; but this is exasperating and costing us $30-$60 for service/downloads we do not initiate or receive benefit from.

Provider gives us the "privacy" BS, and wants to charge us for a "snooper" that will examine where we surf. Our surfing is not the issue. Someone would have to be continually initiating downloads and never time out to get to 10gigs at 128K DSL. Our speed averages from 6-12kbs on downloads we initiate.

Yikes! Help!! Thanks!!!




Continuos DSL downloading problem

I have searched for details of what is causing this, but no results.

Whenever our DSL service is connected to our router, we have continuous downloads happening. At least that's what our service provider says. We have 128k DSL just to minimize our $15/gig overage charges.

All computers are running Spybot S&D and AVG Free with daily updates, nobody downloading any music or watching movies/utube at 128k all that stuff is a crawl anyway. We even disconnect the modem every night and unplug computers from the router when not in use, still our downloads average about .5gig per 17hr user-day.

The router was configured with a password, and wireless is disabled, password for our DSL account was changed.

Techs came out to test our line-in and found no problem there.

How can you download 1/2 gig of material every day, in 15-18 hrs connected, at a 128K connection? Half of the downloads I do seem to crawl along at 6 kbs anyway, but still we get the over charges.

We have wiped data and formatted reinstalled 2 of 3 computers, still happening.

Any help or ideas appreciated.
====================================================

Hi aklester!
Welcome to Major Geeks!

If you've reformatted, it's unlikely this is a malware problem. The correct place to post your question will be in the Networking Forum. However, just for a few things to think about:

Do you have a two-way firewall installed on each of your computers so you can see which programs are connecting to the internet both incoming and outgoing? If not, please take a look at the free ones we recommend in the thread How to Protect Yourself from Malware

A lot of software programs have unnecessary update software attached to them so they will connect to the internet to go look for updates. AVG can be set to look for updates when you tell it to, rather than every time you connect to the internet. Spybot does not need to update except when you choose to run it, not more than once a week. You can do that manually.

If you go to start / run and type in msconfig, you can click on the start tab and see what programs are loading when you start your computer. Some of these like quicktime, java, realplayer, word, send out a query to search for updates for their programs.

Alternatively, this may be a problem with your isp. Have you tried running your computer on someone else's internet connection to see how the download compares?

If you think that you have a malware problem, please run through the READ & RUN ME FIRST and attach the requested logs. We can get rid of some of the startup items for you and also see if there's any malware.

The people at our Networking Forum will be able to give you more feedback regarding what amounts of download one can expect from the type of useage you describe.

abri

Thanks for all you do.

 

Check the activity logs in your router for incoming and outgoing activity.

Reverse lookup the dest and source IPs with DNSSTUFF.COM. See if there is strange activity going on...

That is a strange situation though. Let us know mate.

 

Thanks for the pointers What we have is a linksys wireless router.
How do I check the logs on it?

 

here is something that will help you diagnose which pc is causing the downloads.

Turn them all off.

Turn one on and only one. Use your DSL's usage metering software (sounds like that is what you have, so you can check how much usage you have) and watch it for a day or so without anyone using that computer. If it's flat-lining, then blammo, that PC is in the clear. Turn on the next one. Watch it. So and and so on, till you find the one that is causing the bandwidth hogging.

 

First thing you should do is turn your wireless off, as its possible someone else is using your wireless to aquire internet, then if that doesn't show anything, then look internaly.

 

also a good idea.

leaching is against the terms of service, and if someone is and you are using a wireless network, you need to encrypt your wireless as quickly as possible. Don't go for WEP (too easily cracked). WPA (highest level you can get on your network if possible) is currently much better proof against someone leeching your service.