Computing.Net > Forums > Security and Virus > PC sending huge # of net packets

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

PC sending huge # of net packets

Reply to Message Icon

Name: steverw
Date: February 11, 2004 at 13:28:45 Pacific
OS: XP Pro
CPU/Ram: P1.5G/256MB
Comment:

100M Ethernet activity LED flickering like crazy, but I didn't ask the PC to send anything, and the network activity is not visible to task manager, icon tray icon doesn't show the traffic, netstat doesn't show the traffic. No unbidden programs using cycles in the performance monitor windows. But network status window (the one that comes up when you right click the network icon and select status) does show prodigious amounts of packets being sent, around 4M every 5-6 sec. This keeps on going and going. If the LED on the back of the PC weren't flashing, I'd think someone put a joke "packets sent" counter on my machine, but the traffic seems to be real. I don't have a network analyser to see where the packets are going. Am I paranoid to imagine that there is a stealth program using my network port for someting, staying out of view of the Windows statistics-gathering engines, maybe part of a denial-of-service attack? Anyone have any ideas about how to track this down and kill whatever is doing this? (I've run the latest McAfee virus scan, nothing showed up, also HijackThis didn't turn up anything obvious). Note this only affects the 100M ethernet network, my WLAN doesn't show this behavior. So I'm keeping the ethernet disabled until I can stop the unwanted transmissions.



Sponsored Link
Ads by Google

Response Number 1
Name: Kevin The Tech Dude
Date: February 11, 2004 at 15:31:57 Pacific
Reply:

Go Get Ethereal so you can sniff packets from your own system and also go and get Port Scanner 1.2.2 and scan your system for open ports.


KTTD



0

Response Number 2
Name: palival
Date: February 12, 2004 at 10:05:05 Pacific
Reply:

You might be infected with Mydoom backdoor. it will send lot of data packets to MS site. Try Solo antivirus from www.srnmicro.com


0

Response Number 3
Name: steverw
Date: February 13, 2004 at 09:04:55 Pacific
Reply:

Thanks for the referral to Ethereal, it's a nice tool. It confirmed that my machine is not actually sending out any packets. That means the outgoing packet counter in the status display window is wrong. The counter in the performance monitor is fine.

I really appreciate your help, I was able to set my mind at ease (somewhat). At this time I'm going to put this on the back burner. But I'd still appreciate hearing any ideas on this strange behavior in the status window.


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: PC sending huge # of net packets

can a linksys router protect me www.computing.net/answers/security/can-a-linksys-router-protect-me/15956.html

Browser Hijacking www.computing.net/answers/security/browser-hijacking/7706.html

hack IE and yourself www.computing.net/answers/security/hack-ie-and-yourself/3483.html