[Diego8]

A few days ago i started to notice that after a random time of being
connected to the Internet, a huge amount of data starts to download
(i deactivated all auto-update programs and also Windows Update).
I really would like to know where this data comes from.

Which program should i use to know the ip address (or http type) of the
data i'm downloading/uploading.

Thanks in advance.

[Advertisements]

You might check your Event Logs to see if there is any unauthorized entry of your computer. Also any firewall logs you have. You may need to enable logging. If you look into your network connections you may be able to enable logging, such as TCP/IP. If you set Task Manager to Networking and monitor it, it may help. There are a lot of resouces in XP to monitor such activity. And if you're on a router, it may allow logging too.

Edited by Tyger, 18 July 2005 - 02:01 PM.

[Tyger]

You might check your Event Logs to see if there is any unauthorized entry of your computer. Also any firewall logs you have. You may need to enable logging. If you look into your network connections you may be able to enable logging, such as TCP/IP. If you set Task Manager to Networking and monitor it, it may help. There are a lot of resouces in XP to monitor such activity. And if you're on a router, it may allow logging too.

Edited by Tyger, 18 July 2005 - 02:01 PM.

[starjax]

I think it more likely that you have spyware on your system. start here

follow the instructions, post the highjackthis log into the malware forum and they will check you out. If your still having issues then come back to this thread and we will assist you.

thanks,
Starjax

[Diego8]

My firewall is ZoneAlarm and it detected that Generic Host Process for Win32 Services (svchost.exe) is the file that is downloading data.


Thanks.

[Tyger]

My firewall is ZoneAlarm and it detected that Generic Host Process for Win32 Services (svchost.exe) is the file that is downloading data.
Thanks.

The Service Host processes are part of the XP system, used by many applications to exchange or download files. The big question is "What is using it?". Like the man said, you may have spyware or malware. Or you could be uploading to someone else.